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MEDIUM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To ensure security and also to simultaneously 
receive supply of plural types of services with a single IC card. 
SOLUTION: The data which permit access to the service data on another type of 
service while a certain type of service is performed are registered on a service 
relation table when plural types of service are registered on an IC card. The 
service relation table includes a registered sen/ice ID field where the service IDs 
registered on the IC card are described and a permission information field where 
the permission information corresponding to each service ID is described. The 



permission information describes a service ID that can be accessed when its 
corresponding service is performed and the information that shows the 
executable processing to the accessible service ID. 
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damages caused by the use of this translation. 

I.This document has been translated by computer. So the translation may not 

reflect the original precisely. 
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3. In the drawings, any words are not translated. 

CLAIMS 
[Claim(s)] 

[Claim 1] In the data storage with which an information processor is equipped 
and which performs transfer of said information processor and data An 
input/output control means against said information processor to control I/O of 
said data, The 1st storage control means which controls the data storage 
corresponding to two or more services, The 1st service ID corresponding to the 
1st service of the services of said plurality When I/O of said data about said 1st 
service is controlled by said input/output control means, I/O of said data is 
permitted. Data storage characterized by having the 2nd storage control means 
which controls storage of the 2nd service ID corresponding to the 2nd service of 
the services of said plurality. 

[Claim 2] Said 2nd storage control means is data storage according to claim 1 
characterized by controlling further storage of the information about a limit of the 



access privilege about said 2nd service. 

[Claim 3] Said 2nd storage control means is data storage according to claim 1 
characterized by controlling storage of two or more 2nd services ID of said when 
two or more said 2nd service ID exists to said 1st service ID, and controlling 
storage so that said 2nd service ID serves as a blank when one does not exist 
[ said 2nd service ID ] to said 1st service ID. 

[Claim 4] In the data store method of the data storage with which an information 
processor is equipped and which performs transfer of said information processor 
and data The input/output control step to said information processor which 
controls I/O of said data, The 1st storage control step which controls the data 
storage corresponding to two or more services, The 1st service ID 
corresponding to the 1st service of the services of said plurality When I/O of said 
data about said 1st service is controlled by processing of said input/output 
control step, I/O of said data is permitted. The data store method characterized 
by including the 2nd storage control step which controls storage of the 2nd 
service ID corresponding to the 2nd service of the services of said plurality. 
[Claim 5] The input/output control step which an information processor is 
equipped with, and is a program said information processor and for the data 
storage which performs transfer of data, and controls the I/O of said data to said 
information processor, The 1st storage control step which controls the data 



storage corresponding to two or more services, The 1st service ID 
corresponding to the 1st service of the services of said plurality When I/O of said 
data about said 1st service is controlled by processing* of said input/output 
control step, I/O of said data is permitted. The record medium with which the 
program which the computer characterized by including the 2nd storage control 
step which controls storage of the 2nd service ID corresponding to the 2nd 
service of the services of said plurality can read is recorded. 



DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the data storage and the data 
store method which make it possible to perform in parallel transfer of the data 
about other services permitted beforehand, securing security, when the IC card 
and the reader writer are performing transfer of the data about predetermined 
service concerning data storage and a data store method. 
[0002] 

[Description of the Prior Art] Use of IC (Integrated circuit) card is increasing in a 



cybermoney system and a security system. The IC card contains the memory 
which memorizes CPU (Central Processing Unit) which performs various 
processings, data required for processing, etc., and transmission and reception 
of data are performed by non-contact using the condition of having made the 
predetermined reader writer contacting electrically, or an electromagnetic wave. 
In addition, generally required power is supplied to the IC card transmit and 
receive data by non-contact between reader writers using an electromagnetic 
wave by the electromagnetic wave. 

[0003] A common key system or a public key system is used for an IC card and 
authentication of a reader writer. The key used for decode is the same as the 
key used for encryption in a common key system. Since it is necessary to share 
a common key between a transmitting person and an addressee beforehand in 
order to use a common key encryptosystem, it is necessary to send the key used 
for encryption to a communications partner using safe means by which a 
channel is another (that is, the IC card and the reader writer must share the 
common key beforehand). Fundamentally, encryption is performed combining 
the "substitution" which transposes "the transposition (character transposition)" 
which replaces the sequence of an alphabetic character, and the alphabetic 
character according to a fixed regulation to another alphabetic character. 
Cryptographic algorithm and a key show in what kind of sequence it changes, or 



which alphabetic character and which alphabetic character are replaced. In 
encryption, the number of alphabetic characters which the transposition code for 
changing the substitution cipher for shifting an alphabetic character and the 
sequence of an alphabetic character is fundamental code conversion, and is 
shifted serves as a key. 

[0004] In a code system, the two keys an "encryption key" and a "decode key" 
are used for a public key system in a pair, the encryption key of them is exhibited, 
the publisher of a key manages a decode key and it is made secret. When 
transmitting data, correspondence is enciphered using an encryption key and it 
returns using a decode key in the side which received. Although it is not 
impossible to ask for a decode key from an encryption key since two keys are 
decided based on a certain mathematical relation, it is not realistic from the point 
of computational complexity. 

[0005] Although it has the advantage of it not being necessary to distribute a 
decode key and having the authentication function of the message by the digital 
signature further since a public key cryptosystem should just have even the 
decode key which each user has separately in order distribution of an encryption 
key is easy and to decode a cipher, since it is not necessary to keep an 
encryption key secret compared with the conventional common key 
encryptosystem system, compared with a common key encryptosystem system, 



the time amount concerning authentication processing becomes long. 
[0006] A digital signature is an approach to show that it is sent by the addresser 
with the just message, and the alteration etc. is not performed on the way in an 
electronic mail, online dealings, etc. In the usual cipher communication link, 
although it enciphers with a public key, in the case of a RSA (Rivest, Shamir, 
Adleman) public key cryptosystem, it is "Enciphering with a decode key (private 
key)" with a digital signature conversely, for example. Moreover, in other cipher 
systems, to data to add a signature, the hash value was taken and it is 
enciphered with the private key. 

[0007] A public key is used in order to verify this signature (that is, the role of an 
encryption key and a decode key is replaced). Since the public key is exhibited 
widely, anyone can inspect the justification of the signature easily. A public key 
can restore a cipher correctly, and if a meaningful sentence is obtained, it can be 
checked as he is a right addresser. Only the addresser of normal knows the 
private key (key which signed), and in order to create the digital signature which 
can be restored with a public key, it is because the private key used as the pair 
must be known. Moreover, when data are altered, since it becomes impossible 
to decode data correctly, they are applicable also to prevention and detection of 
an alteration. If verification of a signature is performed by comparing the value 
decoded using the public key with the hash value separately recalculated from 



data, and is in agreement and it is not [ it is judged that data are not altered and ] 

in agreement, it is judged that the alteration of data was performed. 

[0008] Moreover, the organization of the 3rd person aiming at publishing the 

certificate for proving that he is the organization for which data issue-origin can 

set reliance is called certificate authority (CA (Certificate Authority)). 

[0009] 

[Problem(s) to be Solved by the Invention] Other services cannot be received 
while having received one service, when receiving two or more services 
conventionally using an IC card. In an IC card and a reader writer, it is because it 
is necessary to perform authentication processing in order to deliver and receive 
predetermined data and to secure the security to each data. However, when 
prepaid service and cybermoney service can be received for example, using the 
same reader writer as the same IC card, there is a demand of wanting to be filled 
up with cybermoney, performing liquidation processing about prepaid service. 
[0010] It makes it possible to perform in parallel transfer of the data about other 
services permitted beforehand, securing security, when this invention is made in 
view of such a situation and transfer of the data about predetermined service is 
being performed. 
[0011] 

[Means for Solving the Problem] An input/output control means as opposed to an 



information processor in the data storage of this invention and to control I/O of 
data, The 1st storage control means which controls the data storage 
corresponding to two or more services, The 1st service ID corresponding to the 
1st service of two or more services When I/O of the data about the 1st service is 
controlled by the input/output control means, it is characterized by having the 
2nd storage control means which controls storage of the 2nd service ID 
corresponding to the 2nd service of two or more services to which I/O of data is 
permitted. 

[0012] The 2nd storage control means can be made to control storage of the 
information about a limit of the access privilege about the 2nd service. 
[0013] When two or more 2nd service ID exists to the 1st service ID, storage of 
two or more 2nd services ID is made to control, and the 2nd storage control 
means can be made to control storage so that the 2nd service ID serves as a 
blank when one does not exist [ the 2nd service ID ] to the 1st service ID. 
[0014] The input/output control step by which the data store method of this 
invention controls the I/O of data to an information processor, The 1st storage 
control step which controls the data storage corresponding to two or more 
services, The 1st service ID corresponding to the 1st service of two or more 
services I/O of data is permitted when I/O of the data about the 1st service is 
controlled by processing of an input/output control step. It is characterized by 



including the 2nd storage control step which controls storage of the 2nd service 
ID corresponding to the 2nd service of two or more services. 
[0015] The program currently recorded on the record medium of this invention 
The input/output control step to an information processor which controls I/O of 
data, The 1st storage control step which controls the data storage corresponding 
to two or more services, The 1st service ID corresponding to the 1st service of 
two or more services I/O of data is permitted when I/O of the data about the 1st 
service is controlled by processing of an input/output control step. It is 
characterized by including the 2nd storage control step which controls storage of 
the 2nd service ID corresponding to the 2nd service of two or more services. 
[0016] In the program currently recorded on the data storage, data store method, 
and record medium of this invention The 1st service ID corresponding to [ I/O of 
the data to an information processor is controlled, and the data storage 
corresponding to two or more services is controlled, and ] the 1st service of two 
or more services When I/O of the data about the 1st service is controlled by 
processing of an input/output control step, storage of the 2nd service ID 
corresponding to the 2nd service of two or more services to which I/O of data is 
permitted is controlled. 
[0017] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention 



is explained with reference to drawing. 

[0018] The relation between an IC card and a reader writer is shown in drawing 
1_ . IC card 1 can be dealt with authentication service of both authentication by 
the common key system, and the authentication by the public key system (about 
each authentication approach, it mentions later). The reader writer 2-1 
corresponding to a non-contact type common key communicates by IC card 1 
and non-contact, and attests with a common key system. The reader writer 2-2 
corresponding to a non-contact type public key communicates by IC card 1 and 
non-contact, and attests with a public key system. The reader writer 2-3 
corresponding to a contact process public key communicates by contacting, and 
communicates with a public key system. 

[0019] For example, the information which offers service of the prepaid card 
which can perform payment of a commuter pass or a fare is included in IC card 1 . 
To the case where the ticket gate of a station is used using IC card 1 , and IC 
card 1 The function as an ID card is included and the non-contact 
communication link with a common key is performed using the reader writer 2-1 
corresponding to a non-contact type common key in the processing asked for 
the short processing times in the case of attesting entrance authorization using 
IC card 1 etc. 

[0020] For example, the information which offers service of cybermoney is 



included in IC card 1, when processing liquidation of the goods which the user 
purchased at the store etc., authentication is performed by the public key system 
and authentication processing takes time amount. For this reason, when not 
caring especially about the processing time, in order to communicate by 
non-contact and to shorten the processing time using the reader writer 2-2 
corresponding to a non-contact type public key, the reader writer 2-3 
corresponding to a contact process public key is used, and it may be made to 
communicate by contacting. 

[0021] Although the reader writer 2-1 thru/or the reader writer 2-3 corresponding 
to a contact process public key corresponding to a non-contact type common 
key is explained as a reader writer according to individual, it is one reader writer 
and you may enable it to use two or more correspondence procedures and two 
or more authentication approaches in drawing 1 if needed. 
[0022] Next, a card publisher, a service provider, and a card holder are 
explained using drawing 2 . 

[0023] The card publisher 11 approves providing a service provider 12 with the 
service using IC card 1 to the card holder 13 who holds IC card 1, and publishes 
IC card 1 to the card holder 13 who wished issue of IC card 1 . 
[0024] From the card publisher 11, the service provider 12 which received 
license of service registers the data (Service Individual Info later mentioned 



using drawing 6 ) corresponding to the service with which he provides the card 
holder 13 into the reader writer 2-11 for service registration which the card 
publisher 1 1 has. You may make it register with the reader writer 2-1 1 for service 
registration, and an operator may be made to register manually through the 
Internet etc. about this registration from the personal computer which a service 
provider 12 has and which is not illustrated, for example. 

[0025] The card holder 13 can make it register into IC card 1 published by the 
card publisher 1 1 using the reader writer 2-1 1 for service registration to give [ to 
wish one's service ]. About the reader writer 2-11 for service registration, and 
service registration processing of IC card 1 , it mentions later using drawing 29 
and drawing 30 . 

[0026] And the card holder 13 can make service delete from its own IC card 1 
using the reader writer 2-11 for service registration which the card publisher 11 
manages, or the general reader writer 2-12 which a service provider 12 
manages to delete service registered into its own IC card 1. About the service 
deletion of IC card 1 and the reader writer 2-11 for service registration, it 
mentions [ deletion / of drawing 31 and drawing 32 , IC card 1 , and the general 
reader writer 2-12 / service ] later using drawing 33 and drawing 34 . 
[0027] Moreover, cybermoney service and prepaid service are registered into IC 
card 1, and the card holder 13 is in the situation that each value information is 



recorded on the information about each service of IC card 1. When you want to 
transpose a part of worth of cybermoney to prepaid value, Intermodule 
communication can be performed using the reader writer 2-13 for intermodule 
communications which a service provider 12 manages between the public key 
module later mentioned using drawing 13 of its own IC card 1, and a common 
key module. The reader writer 2-13 for intermodule communications is made as 
[ correspond / to a common key system and two methods of a public key 
system ]. About processing with IC card 1 and the reader writer 2-13 for 
intermodule communications, it mentions later using drawing 48 thru/or drawing 
51. 

[0028] Furthermore, the card holder 13 can make the authentication key 
registered into its own IC card 1 upgrade using the general reader writer 2-12 
which a service provider 12 manages, or the reader writer 2-14 for version up to 
update the invalidated authentication key (version up). About key version up 
processing with IC card 1 and the reader writer 2-14 for version up, it mentions 
[ processing / with IC card 1 and the general reader writer 2-12 / key version up ] 
later using drawing 45 thru/or 47 using drawing 43 and 44. 
[0029] Drawing 3 is the block diagram showing the configuration of IC card 1. 
[0030] IC card 1 consists of the communications department 21 which performs 
the communication link with the reader writer 2 (these shall be named 



generically and the reader writer 2 shall be called about the case where there is 
no need of distinguishing the reader writer 2-1 thru/or 2-3 or the reader writer 
2-11 thru/or especially 2-14), and the IC card processing section 22 which 
performs data processing. 

[0031] The communications department 21 has the coil for communicating with 
the reader writer 2-1 corresponding to a non-contact type common key, or the 
reader writer 2-2 corresponding to a non-contact type public key using an 
electromagnetic wave, when corresponding IC card 1 is the reader writer 2-1 
corresponding to the non-contact type common key explained using drawing 1 , 
or the reader writer 2-2 corresponding to a non-contact type public key. 
moreover, IC card 1 the communications department 21 only not only in the 
reader writer 2-1 corresponding to the non-contact type common key explained 
using drawing 1 , and the reader writer 2-2 corresponding to a non-contact type 
public key When the communication link with the reader writer 2-3 corresponding 
to a contact process public key is also supported, the reader writer 2-1 
corresponding to a non-contact type common key, or the reader writer 2-2 
corresponding to a non-contact type public key, It has the coil for communicating 
using an electromagnetic wave, and the contact terminal for communicating with 
the reader writer 2-3 corresponding to a contact process public key. 
[0032] The communications department 21 receives the data transmitted from 



the reader writer 2, and the received data When becoming irregular using ASK 
(Amplitude Shift Keying) or BPSK (Binary Phase Shift Keying), for example, by 
predetermined processing While restoring to the received data and supplying the 
control section 31 of the IC card processing section 22, the data generated by 
processing of the IC card processing section 22 are supplied from a control 
section 31, and it becomes irregular using ASK or BPSK, and transmits to the 
reader writer 2. 

[0033] The IC card processing section 22 consists of a control section 31, 
memory 32, and the cipher-processing section 33. According to the data 
supplied from the communications department 21, a control section 31 controls 
the cipher-processing section 33, cipher processing required for authentication 
processing with the reader writer 2 etc. is performed, or it reads the data 
currently recorded on memory 32 if needed, and transmits to the reader writer 2 
through the communications department 21. 

[0034] Memory 32 consists of a memory area 44 where CA_Pub which is Card 
ID, the authentication key Kreg for service registration, and the public key of a 
certificate authority is recorded, Service Relation Table (SRT)45 later mentioned 
using drawing 8 , and Service Registration Area (SRA)46 later mentioned using 
drawing 6 . 

[0035] The cipher-processing section 33 consists of the public key processing 



section 41, the common key processing section 42, and the other 
cipher-processing sections 43. The detail about the processing which the public 
key processing section 41 thru/or the other cipher-processing sections 43 
perform is later mentioned using drawing 5 . 

[0036] Next, drawing 4 is the block diagram showing a different configuration 
from drawing 3 of IC card 1. In addition, in IC card 1 of drawing 4 , the same sign 
is given to the case in drawing 3 , and the corresponding part, and the 
explanation is omitted suitably (following, the same). 

[0037] IC card 1 consists of the public key service processing sections 54 which 
perform processing of the data obtained by processing of the communications 
department 51 which performs the communication link with the reader writer 2 
about common key service, the common key service processing section 52 
which performs processing of the data obtained by processing of the 
communications department 51, the communications department 53 which 
performs the communication link with the reader writer 2 about public key 
service, and the communications department 53. 

[0038] The communications department 51 has the coil for communicating with 
the reader writer 2-1 corresponding to a non-contact type common key. When 
the data transmitted from IC card 1 are modulated like the communications 
department 21 using ASK or BPSK, by predetermined processing While 



restoring to the received data and supplying the control section 61 of the 
common key service processing section 52, the data generated by processing of 
the common key service processing section 52 are supplied from a control 
section 61, and it becomes irregular using ASK or BPSK, and transmits to the 
reader writer 2. 

[0039] The common key service processing section 52 consists of a control 
section 61, memory 62, and the cipher-processing section 63. According to the 
data supplied from the communications department 51, a control section 61 
controls the cipher-processing section 63, processing required for authentication 
processing with IC card 1 etc. is performed, or it reads the data currently 
recorded on memory 62 if needed, and transmits to the reader writer 2 through 
the communications department 51. 

[0040] Memory 62 consists of a memory area 44, and SRT45 and SRA46 like 
the memory 32 explained using drawing 3 . Share private key K_common used 
by the authentication key Kreg and intermodule communication Card ID and for 
service registration is recorded on the memory area 44. 

[0041] The cipher-processing section 63 consists of the common key processing 
section 42 and the other cipher-processing sections 43. That is, in the common 
key service processing section 52, in order not to process the service about a 
public key, the cipher-processing section 63 is not equipped with the public key 



processing section 41 explained using drawing 3 . 

[0042] The communications department 53 has the coil or contact terminal for 
communicating with the reader writer 2-2 corresponding to a non-contact type 
public key, or the reader writer 2-3 corresponding to a contact process public key. 
When the data with which the communications department 53 is also transmitted 
from IC card 1 are modulated using ASK or BPSK, like the communications 
department 21 by predetermined processing While restoring to the received data 
and supplying the control section 61 of the public key service processing section 
54, the data generated by processing of the public key service processing 
section 54 are supplied from a control section 61 , and it becomes irregular using 
ASK or BPSK, and transmits to the reader writer 2. 

[0043] The public key service processing section 54 consists of a control section 
61 , memory 62, and the cipher-processing section 33. That is, except that it has 
the cipher-processing section 33 explained using drawing 3 instead of the 
cipher-processing section 63, it is the same configuration fundamentally with the 
common key service processing section. 

[0044] Next, the public key processing section 41 thru/or the other 
cipher-processing sections 43 are explained using drawing 5 . 
[0045] As shown in drawing 5 (A), the public key processing section 41 is 
equipped with RSA signature generation / verification section 71 which performs 



generation and verification of a signature using a RSA (Rivest, Shamir, 
Adleman) public key cryptosystem, and DSA signature generation / verification 
section 72 which performs generation and verification of a signature using a 
DSA (Digital Signature Algorithm) method. 

[0046] In RSA signature generation / verification section 71, two keys perform 
encryption and decode. In a RSA cryptosystem, two keys are decided as follows, 
for example. 

[0047] Some two big prime factors p and q are chosen, and the product n=pq is 
calculated. And x (p-1) (q-1) and the relatively prime integer e are chosen below 
by x (p-1) (q-1), and the integer d with which the following formula (1) is filled is 
searched for. 

Exd = 1 mod... (x (p-1) (q-1)) (1) 

Then (e, n), a public key and d become a private key. 

[0048] When enciphering Sentence M and generating the encryption data C, the 
following formula (2) is used. 
C=M e mod n ... (2) 

Moreover, when decoding the encryption data C, the following formula (3) is 
used. 

M=C d mod n ... (3) 

[0049] DSA signature generation / verification section 72 is equipped with the 



random-number generation section which is not illustrated. DSA is a digital 
signature algorithm which improves the EIGamal signature which used the 
difficulty of DLP (Discrete Logarithm Problem; dispersion a logarithm problem) 
as the base, shortens the die length of a signature to 160bitx2 f and employs 
generation of a signature key etc. by the specific approach. It is premised on 
using SHA-1 (Secure Hash Algorithm-1) for a Hash Function (data compression 
function) in signature generation. The DSA method was developed as a criterion 
of electronic signature by NIST (U.S. Department of Commerce standard 
technical station: National Institute of Standards and Technology) which is the 
U.S. Government engine, and was set to U.S. Federal Information Processing 
Standard (Federal Information Processing Standard) FIPS PUB 186. 
[0050] Moreover, as shown in drawing 5 (B), the common key processing 
section 42 is equipped with the DES processing section 73 which performs 
authentication processing by the DES (Data Encryption Standard) common key 
encryptosystem system, RC5 processing section 74 which performs 
authentication processing by RC5 (Rivest Ciphers) method, and the AES 
processing section 75 which performs authentication processing by the AES 
(Advanced Encryption Standard) method. 

[0051] A DES common key encryptosystem system is a common key 
encryptosystem system which was enacted in NIST in 1977 and standardized by 



American National Standards Institute (ANSI:American National Standards 
Institute) in 1981. The authentication algorithm of the key of a DES common key 
encryptosystem system is exhibited, and has spread widely as a representative 
of a common key encryptosystem system. 

[0052] A DES common key encryptosystem system is a code system which 
divides data per 64 bits and performs encryption and decode processing. In a 
DES algorithm, encryption and decode are making the symmetry, and if the 
received cipher is changed once again using the same key, they can restore the 
original text. Moreover, in the DES common key encryptosystem system, the 
combination logic of easy bit-position transposition and an XOR operation is 
repeated 16 times. Since processing is successive, if there are no feedback and 
conditional-judgment part of data internally, and it pipelines, it can process at a 
high speed. It is the algorithm decided on the assumption that it LSI-ized from 
the first, and many DES chips are also made. 

[0053] In RC5, it is the common key encryption system of RSA Data Security 
and RC series which Massachusetts Institute of Technology developed, and was 
proposed in 1995. RC5 is a block cipher system which has a variable-length 
block size, variable-length key size, and the round of the count of variable length 
(Data dependent rotations (data dependence bit rotation) algorithm which 
changes the amount of bit rotation with former data or a key). As the block size, it 



is possible to take 32 or 64,128 bits, the number of rounds is 0 to 255, and key 
size is adjustable to 0 to 2048 bits. It is possible for the algorithm of RC5 to be 
exhibited and to receive as RFC2040. 

[0054] Moreover, an AES method is a next-generation standard cipher system of 
the U.S. Government with which selection is performed by NIST. It is that DES 
used as a current standard code was enacted, and the dependability is falling 
every year with high-performance-izing of a computer in recent years, and 
development of the code theory. Then, NIST sought the cipher system which 
serves as an AES candidate from the whole world as a code criterion of the next 
generation replaced with DES. The method of 15 which gathered from all over 
the world is undergoing the examination, and is due to be determined by the 
beginning of the 21st century. 

[0055] And to a message, it is making an irreversible Hash Function act, and the 
other cipher-processing sections 43 perform cipher processing except the public 
key processing section 41 or the common key processing section 42 of creating 
a digital signature processing by creating a "message digest" and enciphering a 
message digest with a signature key, when using a digital signature. In the other 
cipher-processing sections 43, as shown in drawing 5 (C) For example, 
[ whether it has the SHA-1 processing section 76 which processes Hash 
Function SHA-1 used for signature generation and signature verification, and the 



intrinsic random-number generation section 77 which generates the intrinsic 
random number used with a mutual recognition protocol, and ] Or as shown in 
drawing 5 (D) The MD5 processing section 78 which processes Hash Function 
MD5 used for signature generation and signature verification, and the 
pseudo-random number (artificial random number which has the random 
possible digit string in the range of the figure of the existing limited digit count) 
used with a mutual recognition protocol It has the pseudo-random-number 
generation section 79 to generate. 

[0056] In a digital signature, although that processing speed is slow poses a 
problem in order to use a public key cryptosystem, the time amount concerning 
digital signature creation is reduced by creating a message digest. Furthermore, 
since the Hash Function has the property of reacting greatly to the alteration of 
data, in case it verifies a digital signature, it can check easily whether the 
message body is altered by comparing the message digest which decoded and 
took out the digital signature with the verification key with the message digest 
which the Hash Function was made to act on the sent message body, and was 
created. 

[0057] SHA-1 is an one-way hash function which generates the hash value of 
160 bits from the message of the die length of arbitration. Like DSA, it is what 
NIST developed and is FIPS PUB180 by NIST. It was set. Standard draft 



proposal (N544) is what was fundamentally based on FIPS PUB 180. 
[0058] And MD5 is one of the message digest function algorithms currently 
generally used widely, and is defined by RFC1321. The algorithm is decided so 
that MD5 can be efficiently calculated on a 32-bit computer. There is also 
another similar algorithm [ say / MD4 or MD2 ]. 

[0059] Next, the information stored in SRA46 of IC card 1 explained using 
drawing 3 and drawing 4 is explained using drawing 6 . 

[0060] SRA46 is a memory area for recording the information (information 
registered using the reader writer 2-1 1 for service registration explained using 
drawing 2 ) for receiving those services of two or more, in order that the user 
who holds IC card 1 may enable it to receive two or more services using the 
general reader writer 2-12 explained using drawing 2 . 

[0061] Namely, Service Individual Infol thru/or N which is the information on the 
service registered into the IC card 1 is registered into SRA46. In each Service 
Individual Info Were beforehand set for every service ID for identifying the class 
of service, and service. One or two or more key information for authentication (in 
Service Individual Info k in drawing 6 ) The certificate to an authentication key 
etc. is registered if needed with authentication key Kake_vup for upgrading the 
service data used in order to receive 1 thru/or the key information for n 
authentications on n, and service, and key information. 



[0062] The authentication key Kake for discernment (certificate [ as opposed to 
an authentication key according to the need ]) used in order to identify the level 
of for example, the authentication key ID and a key and a version, an 
authentication method, and two or more authentication keys is contained in the 
key information for authentication. Moreover, in addition to user ID, when 
Service Individual Info k is for example, cybermoney service, and Service 
Individual Info k, such as balance information, the accumulation point, etc. of 
cybermoney, is for example, automatic wicket services, effective section 
information etc. is stored in service data. 

[0063] Next, the key information for authentication registered into Service 
Individual Info of drawing 6 is explained using drawing 7 . 

[0064] In drawing 7 (A), certificate data are registered the version of the 
authentication key ID and a key, an authentication method, the authentication 
key Kake for discernment, and if needed corresponding to each of field No.1 and 
field No.2. About authentication key discernment processing in case the key 
information for authentication is registered like drawing 7 (A), it mentions later 
using drawing 20 thru/or drawing 24 . 

[0065] In drawing 7 (B), certificate data are registered the level of the 
authentication key ID and a key, the version of a key, an authentication method, 
the authentication key Kake for discernment, and if needed corresponding to 



each of field No.1 thru/or field No. 7. About authentication key discernment 
processing in case the key information for authentication containing the level of a 
key is registered like drawing 7 (B), it mentions later using drawing 27 and 
drawing 28 . 

[0066] Next, the information stored in SRT45 of IC card 1 explained using 
drawing 3 and drawing 4 is explained using drawing 8 . 

[0067] When two or more services are registered into ID card 1 by SRT45, the 
data for permitting access to the service data of another service are registered 
into it, offering a certain service. SRT45 consists of a registration service ID field 
( drawing 8 is indicated as services IDA and J) the service ID registered into IC 
card 1 is indicated to be, and permission information field where the permission 
information corresponding to each service ID is indicated. 

[0068] The services ID of the service registered are altogether enumerated by 
the registration service ID field of permission information. And when 
corresponding service is performed, the information which shows what kind of 
processing [ the service ID which can access the service indicated by the 
registration service ID field, and ] it permits are performed is indicated in 
permission information field. For example, when read-out and writing are 
permitted, "rw M is indicated as permission information, when only read-out is 
permitted, "ro" is indicated as permission information, and when version up of a 



key is permitted, "vup" is indicated as permission information. Although "rw M and 
"ro" are not permitted to the same service ID, a permission is granted to the 
same service ID and "rw", "vup", and "ro" and "vup" can be enumerated to 
permission information field. 

[0069] namely, when the permission information shown in drawing 8 is 
registered into SRT45, during activation of the service Service ID is indicated to 
be by C It is also under [ activation / of the service with which read, and writing is 
permitted to the service Service ID is indicated to be by B, and Service ID is 
further indicated to be by D ] also setting. As opposed to the service Service ID is 
indicated to be by D during activation of the service with which read-out to the 
service Service ID is indicated to be by B is permitted, and Service ID is 
indicated to be by E Read-out, writing, and version up of a key are permitted. 
The following, the service Service ID is indicated to be by E, the service Service 
ID is indicated to be by F, and the service Service ID is indicated to be by G - or 
Also in the service Service ID is indicated to be by I, the processing 
corresponding to permission information is permitted during activation of the 
processing corresponding to other services ID based on the information 
indicated in corresponding permission information field. 

[0070] Registration of such permission information is performed when 
registering the service corresponding to IC card 1. Namely, a user receives IC 



card 1 which he holds using the reader writer 2-1 1 for service registration. If the 
service Service ID is indicated to be by G is already registered and the service 
Service ID is indicated to be by H is not registered when registering the service 
Service ID is indicated to be by F for example Only the permission information 
corresponding to the service Service ID is indicated to be by G can be registered 
into the permission information field corresponding to F of a registration service 
ID field. And after a user registers into ID card 1 the service Service ID is 
indicated to be by H, the permission information on service over the service 
Service ID is indicated to be by F by which Service ID is shown by H can be 
registered by updating the service Service ID is indicated to be by F. 
[0071] Next, drawing 9 is the block diagram showing the configuration of the 
reader writer 2. 

[0072] The reader writer 2 consists of the communications department 91 which 
performs the communication link with IC card 1, and the reader writer processing 
section 92 which performs data processing. 

[0073] The communications department 91 has structure equipped with the 
contact terminal for communicating by the coil for having only a coil for namely, 
communicating using an electromagnetic wave by whether the reader writer 2 
has adopted which communication mode of the non-contact type explained 
using drawing 1 , and a contact process, or communicating by the 



correspondence procedure with IC card 1, using an electromagnetic wave, and 
the contact process. 

[0074] When the communications department 91 receives the data transmitted 
from IC card 1 and the received data are modulated using ASK or BPSK, by 
predetermined processing While restoring to the received data and supplying the 
control section 101 of the reader writer processing section 92, the data 
generated by processing of the reader writer processing section 92 are supplied 
from a control section 101, and it becomes irregular using ASK or BPSK, and 
transmits to IC card 1 . 

[0075] The reader writer processing section 92 consists of a control section 101 , 
the cipher-processing section 102, memory 103, the communications 
department 104, a display 105, and the input section 106. A control section 101 
controls the cipher-processing section 102 according to the data supplied from 
the communications department 91, and the data currently recorded on memory 
103 are read if needed in performing cipher processing required for 
authentication processing with IC card 1 etc. ****. The signal corresponding to 
the various actuation which the user inputted, using the input section 106 in 
transmitting to IC card 1 ****, and a network are minded through the 
communications department 91. The input of the control signal inputted into the 
communications department 104 is received, processing is performed according 



to these signals, and the result is displayed on a display 105. 
[0076] moreover, transfer of the magnetic disk 1 15 with which the drive 1 14 is 
also connected to the communications department 104, and drive 114 is 
equipped, an optical disk 116, a magneto-optic disk 117 semiconductor memory 
118, etc. and data - a line -- things are made. 

[0077] Since it has the same configuration as the cipher-processing section 33 
explained using drawing 3 , the cipher-processing section 102 omits the 
explanation. 

[0078] The information for performing processing of IC card 1 and 
predetermined is memorized by memory 103. The information differs by the 
thing corresponding to any of the reader writer 2-11 for service registration 
explained using drawing 2 thru/or the reader writer 2-14 for version up the reader 
writer 2 is. The data memorized by the memory 103 of the reader writer 2-1 1 for 
service registration thru/or the reader writer 2-14 for version up are explained 
using drawing 10 thru/or drawing 14 . 

[0079] The authentication key Kreg used for the memory 103 of the reader writer 
2-1 1 for service registration shown in drawing 10 when registering or deleting 
data to SRA46 of the memory 32 of IC card 1 is memorized (the certificate of an 
authentication key is also memorized if needed), and Service Individual Infol 
thru/or n corresponding to the various services for registering with IC card 1 is 



memorized. 

[0080] The service ID corresponding to the service which can be processed by 
this general reader writer 2-12, the authentication key list corresponding to it, 
and key lapse information are memorized by the memory 103 of the general 
reader writer 2-12 shown in drawing 11 . Moreover, when making the general 
reader writer 2-12 enable service of key version up, the information on the key of 
an upgrade product etc. is also united and memorized by the memory 103 of the 
general reader writer 2-12 at it. 

[0081] The service ID corresponding to the service which can be processed by 
this reader writer 2-13 for intermodule communications, the authentication key 
list corresponding to it, and key lapse information as well as the information 
memorized by the memory 103 of the general reader writer 2-12 are memorized 
by the memory 103 of the reader writer 2-13 for intermodule communications 
shown in drawing 12 . As indicated in drawing 13 as intermodule communication, 
to the reader writer 2-13 for intermodule communications currently made as 
[ correspond / to two methods of a common key system and a public key 
system ] The public key module 121 (for example, it corresponds to the 
communications department 53 of IC card 1 which explained using drawing 4 , 
and the public key service processing section 54), It equips with IC card 1 which 
has the common key module 122 (for example, it corresponds to the 



communications department 51 of IC card 1 explained using drawing 4 , and the 
common key service processing section 52). It is performing the communication 
link of the data of the public key module 121 and the common key module 122 
through the reader writer 2-13 for intermodule communications. The detail of the 
processing about intermodule communication is later mentioned using drawing 
48 thru/or drawing 51 . 

[0082] And the list of authentication key Kake_vup for version up corresponding 
to Service ID and its service ID and the authentication keys Kake for upgrading 
the authentication key of the service registered into IC card 1 with which it was 
equipped to the memory 103 of the reader writer 2-14 for version up shown in 
drawing 14 is memorized. 

[0083] When IC card 1 and the reader writer 2 communicate, in order for the 
reader writer 2 to carry out mutual recognition to IC card 1 first except for 
processing used as some exceptions, it is necessary to identify the service 
which communicates mutually and to identify the authentication key of the 
service mutually. With reference to the flow chart of drawing 15 , mutual 
recognition processing of IC card 1 and the reader writer 2 is explained. 
[0084] First, in step S1, the reader writer 2 performs service discernment 
processing of the reader writer 2 later mentioned using drawing 16 and drawing 
18 by communicating with IC card 1, and delivering and receiving required data 



if needed. And in step S2, IC card 1 performs service discernment processing of 
IC card 1 later mentioned using drawing 17 and drawing 19 by communicating 
with the reader writer 2, and delivering and receiving required data if needed. 
[0085] And by communicating with IC card 1, and delivering and receiving 
required data if needed, when service discernment processing of the reader 
writer 2 of step S1 and service discernment processing of IC card 1 of step S2 
terminate normally, in step S3, the reader writer 2 performs authentication key 
discernment processing of the reader writer 2 later mentioned using drawing 20 , 
drawing 22 , and drawing 27 . And in step S4, IC card 1 performs authentication 
key discernment processing of IC card 1 later mentioned using drawing 21 , 
drawing 23 , and drawing 28 by communicating with the reader writer 2, and 
delivering and receiving required data if needed. 

[0086] Next, by a user's inputting desired service in the reader writer 2 
corresponding to two or more services, and judging it whether activation of the 
service is possible to be IC card 1 corresponding to two or more services with 
reference to the flow chart of drawing 16 , explains service discernment 
processing of the reader writer 2 performed in step S1 of drawing 15 . 
[0087] To IC card 1, through the communications department 91, the control 
section 101 of the reader writer 2 transmits an IC card detection command, and 
judges whether the ACK signal (signal which IC card 1 transmitted in step S22 of 



drawing 17 mentioned later) was received from IC card 1 in step S12 in step S1 1. 
In step S12, when it is judged that the ACK signal is not received, processing of 
step S12 is repeated until it is judged that the ACK signal was received. 
[0088] When it is judged in step S12 that the ACK signal was received, it sets to 
step S1 3 (namely, when the reader writer 2 is equipped with IC card 1 ). A control 
section 101 According to the signal which shows the actuation which the user 
inputted using the input section 106, the service ID corresponding to giving 
[ which a user wishes ] is transmitted to IC card 1 through the communications 
department 91 based on the service for which it opted beforehand. 
[0089] In step S14, a control section 101 receives the signal (signal which IC 
card 1 transmitted in step S25 or step S26 of drawing 17 mentioned later) 
transmitted from IC card 1. In step S15, the data which the control section 101 
received in step S14 judge whether it is an ACK signal. In step S15, when the 
received signal is judged not to be an ACK signal (that is, for it to be a NACK 
signal), in step S16, a control section 101 outputs and displays the data 
corresponding to an error message on a display 105, and ends processing (that 
is, processing does not progress to step S3 of drawing 15 ). In step S15, when 
the received signal is judged to be an ACK signal, processing progresses to step 
S3 of drawing 15 . 

[0090] Next, with reference to the flow chart of drawing 17 , the service 



discernment processing of IC card 1 performed in parallel to service discernment 
processing of the reader writer 2 explained using drawing 16 is explained in step 
S2 of drawing 15 . In addition, although here explains as that to which 
processing is performed in IC card 1 explained using drawing 3 , when 
processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0091] In step S21 , in step S1 1 of drawing 16 , the control section 31 of IC card 1 
receives the IC card detection command which the reader writer 2 transmitted 
through the communications department 21, and transmits an ACK signal to the 
reader writer 2 in step S22. 

[0092] A control section 31 is set to step S13 of drawing 16 in step S23. The 
service ID which received the service ID which the reader writer 2 transmitted 
through the communications department 21, and was received in step S24 The 
module with which IC card 1 corresponds (although it corresponds to the 
memory 32 of the IC card processing section 22 here since the processing in IC 
card 1 explained using drawing 3 is explained) In the case of IC card 1 explained 
using drawing 4, with the method with which the reader writer 2 corresponds For 
example, the memory 62 of the common key service processing section 52 Or it 
judges whether the service ID received in whether it is ID registered while 
corresponding to the memory 62 of the public key service processing section, 



and step S23 is registered into SRA46 explained using drawing 6 . 
[0093] In step S24, when the received service ID is judged to be registered into a 
module, in step S25, a control section 31 transmits an ACK signal to the reader 
writer 2 through the communications department 21, and processing progresses 
to step S4 of drawing 15 . In step S24, when the received service ID is judged 
not to be registered into a module, in step S26, a control section 31 transmits a 
NACK signal to the reader writer 2 through the communications department 21, 
and processing is ended (that is, it does not progress to step S4 of drawing 15 ). 
[0094] Next, with reference to the flow chart of drawing 18 , it sets to IC card 1 
corresponding to two or more services, and the reader writer 2 corresponding to 
two or more services. By extracting corresponding IC card 1 and the service 
which can perform the reader writer 2, making it display on the display 1 05 of the 
reader writer 2, and making the service for which a user asks choose from those 
services Service discernment processing of the reader writer 2 performed in step 
S1 of drawing 15 in the case of performing service discernment is explained. 
[0095] The control section 101 of the reader writer 2 judges whether the service 
ID list which IC card 1 transmitted was received in step S31 in step S52 of 
drawing 19 which transmits to IC card 1 through the communications department 
91, and mentions a service ID list transmitting command later in step S32. In 
step S32, when it is judged that the service ID list is not received, processing of 



step S32 is repeated until it is judged that the service ID list was received. 
[0096] In step S32, when it is judged that the service ID list was received, in a 
control section 101, in step S33, the service ID indicated by the received service 
ID list judges whether the service which the reader writer 2 supports is included 
(that is, is the service ID memorized by the memory 103 of the reader writer 2 
included or not?). 

[0097] In step S33, when it is judged that the service corresponding to a reader 
writer is included in the received service ID list, in step S34, a control section 101 
judges whether the correspondence service included in the service ID list is 
plurality. In step S34, when correspondence service is judged not to be plurality 
(that is, for it to be only one), processing progresses to step S37. 
[0098] In step S34, when correspondence service is judged to be plurality, in 
step S35, a control section 101 generates the data for displaying two or more 
correspondence services on a display 105, is made to output and display them 
on a display 105, and receives the input of giving [ which a user wishes ] from 
the input section 106 in step S36. Or priority information is included in each 
service and the highest service of a priority may be made to be chosen from from 
automatically among two or more correspondence services. 
[0099] In step S37, when it is judged in step S34 that correspondence service is 
only one, a control section 101 When correspondence service is judged to be 



plurality in step S34, the service ID corresponding to the service In step S36, the 
service ID corresponding to giving [ which the user inputted using the input 
section 106 / to wish one's service ] is transmitted to IC card 1 through the 
communications department 91, and processing progresses to step S3 of 
drawing 15 . 

[0100] When it is judged that the service corresponding to a reader writer is not 
included in the received service ID list in step S33, a control section 101 In step 
S38, through the communications department 91, a NACK signal is transmitted 
to IC card 1 , the same processing as step S16 of drawing 16 is made in step S39, 
and processing is ended (that is, processing does not progress to step S3 of 
drawing 15 ). 

[0101] Next, with reference to the flow chart of drawing 19 , the service 
discernment processing of IC card 1 performed in parallel to service discernment 
processing of the reader writer 2 explained using drawing 18 is explained in step 
S2 of drawing 15 . In addition, although here explains as that to which 
processing is performed in IC card 1 explained using drawing 3 , when 
processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0102] In step S51, the reader writer 2 receives the service ID transmitting 
command transmitted in step S31 of drawing 18 through the communications 



department 21, and the control section 31 of IC card 1 generates the service ID 
list (namely, list of services ID registered into SRA46 of memory 32) with which 
he corresponds in step S52, and transmits to the reader writer 2 through the 
communications department 21 . 

[0103] A control section 31 receives the data which the reader writer 2 
transmitted to IC card 1 in step S37 or step S38 of drawing 18 through the 
communications department 21 in step S53, and the data received from the 
reader writer 2 judge whether it is a NACK signal in step S54. In step S54, when 
the received signal is judged to be a NACK signal, processing is ended (that is, 
processing does not progress to step S4 of drawing 15 ). (namely, when the 
received data are the signal which the reader writer 2 transmitted to IC card 1 in 
step S38 of drawing 18 ) 

[0104] In step S54, when it is judged that the data received from the reader 
writer 2 are not a NACK signal, in step S55, a control section 31 judges whether 
the service ID received from the reader writer 2 is registered into SRA46 of its 
own memory 32 (namely, when the received data are the service ID which the 
reader writer 2 transmitted to IC card 1 in step S37 of drawing 18 ). 
[0105] In step S55, when it is judged that Service ID is not registered, processing 
is ended (that is, processing does not progress to step S4 of drawing 15 ). In 
step S55, when it is judged that Service ID is registered, processing progresses 



to step S4 of drawing 15 . 

[0106] Next, when authentication key discernment is performed with reference to 
the flow chart of drawing 20 using the key information for authentication that it 
explained using drawing 7 (A), authentication key discernment processing of the 
reader writer 2 performed in step S3 of drawing 15 is explained. 
[0107] It is the service ID corresponding to the service from which the control 
section 101 of the reader writer 2 was discriminated in step S61 by service 
discernment processing of step S1 of drawing 15 , and step S2 (here). Read 
from memory 103, transmit to IC card 1 through the communications department 
91, and the authentication key ID corresponding to one of the authentication 
keys which belong for making corresponding service ID into ID_S is set to step 
S62. The data which IC card 1 transmits are received in step S73 or step S75 of 
drawing 21 mentioned later. 

[0108] In step S63, the data which the control section 101 received from IC card 
1 in step S62 judge whether it is an ACK signal. When it is judged in step S63 
that the ACK signal was received, it sets to step S64. A control section 101 The 
cipher-processing section 33 is controlled and it sets to step S61. The inside of 
the public key processing section 111 of the cipher-processing section 102, or 
the common key processing section 112, By choosing and controlling the 
processing section which performs authentication processing using the 



authentication key corresponding to the authentication key ID transmitted to IC 
card 1 Processing is ended, after starting mutual recognition processing with IC 
card 1, and key share processing, sharing IC card 1 and the session key Kses 
and completing mutual recognition processing. 

[0109] In step S63, when it is judged that the ACK signal is not received, in step 
S65, the same processing as step S16 of drawing 16 is made, and processing is 
ended (namely, when it is judged that the NACK signal was received). 
[0110] Next, with reference to the flow chart of drawing 21 , the authentication 
key discernment processing of IC card 1 performed in parallel to authentication 
key discernment processing of the reader writer 2 of drawing 20 is explained in 
step S4 of drawing 15 . In addition, although IC card 1 explained also here using 
drawing 3 explains the case where processing is performed, when processing is 
performed with IC card 1 explained using drawing 4 , same processing is 
performed fundamentally. 

[01 1 1] The control section 31 of IC card 1 judges whether the authentication key 
ID which received the authentication key ID which the reader writer 2 transmitted 
through the communications department 21, and was received in step S71 in 
step S72 is registered into the field to which the data about ID_S of SRA46 of 
memory 32 are memorized in step S61 of drawing 20 in step S71. 
[0112] When it is judged in step S72 that the authentication key ID is registered, 



a control section 31 In step S73, through the communications department 21, 
transmit an ACK signal to the reader writer 2, and it sets to step S74. By 
choosing and controlling the direction which performs authentication processing 
with the authentication key specified as the reader writer 2 among the public key 
processing section 41 of the cipher-processing section 33, or the common key 
processing section 42 Mutual recognition processing is performed, the reader 
writer 2 and the session key Kses are shared, and processing is ended after 
termination of mutual recognition processing. In step S72, when it is judged that 
the authentication key ID is not registered, in step S75, a control section 31 
transmits a NACK signal to the reader writer 2 through the communications 
department 21, and processing is ended. 

[0113] In the processing explained using drawing 20 and drawing 21 , IC card 1 
and the reader writer 2 perform mutual recognition with the authentication key 
specified by the reader writer 2 corresponding to the service ID of the service 
identified by processing of step S1 of drawing 15 , and step S2. 
[0114] For example, it makes to perform high-speed processing by 
authentication processing based on a common key into a default, and when the 
version of a common key is old, based on a public key, it may be made to carry 
out authentication processing, when two kinds of authentication keys, a common 
key and a public key, are prepared to a certain service. 



[0115] Next, with reference to the flow chart of drawing 22 , authentication key 
discernment processing of the reader writer 2 in case two kinds of authentication 
keys, a common key and a public key, are prepared is explained to the service 
corresponding to the service ID of the service identified by processing of step S1 
of drawing 15 and step S2 which are performed in step S3 of drawing 15 . 
[0116] The control section 101 of the reader writer 2 transmits the common key 
version information-requirements command of the authentication key 
corresponding to the service ID of the service identified by processing of step S1 
of drawing 15 , and step S2 to IC card 1 through the communications department 
91, and receives the common key version information which IC card 1 
transmitted through the communications department 91 in step S92 of drawing 
23 mentioned later in step S82 in step S81. 

[01 17] In step S83, a control section 101 judges whether a common key version 
is effective based on the common key version information received in step S82. 
In step S83, when it is judged that a common key version is effective, after a 
control section 101 transmits a mutual recognition initiation command with a 
common key to IC card 1 , controlling the common key processing section 1 12 of 
the cipher-processing section 102, starting mutual recognition with a common 
key, sharing IC card 1 and the session key Kses and completing mutual 
recognition, processing is ended in step S84. 



[01 18] In step S83, when it is judged that a common key version is not effective, 
after a control section 101 transmits the mutual recognition initiation command 
by the public key to IC card 1, controlling the public key processing section 111 
of the cipher-processing section 102, starting the mutual recognition by the 
public key, sharing IC card 1 and the session key Kses and completing mutual 
recognition, processing is ended in step S85. 

[0119] Next, with reference to the flow chart of drawing 23 , the authentication 
key discernment processing of IC card 1 performed in parallel to authentication 
key discernment processing of the reader writer 2 explained using drawing 22 is 
explained in step S4 of drawing 15 . In addition, although IC card 1 explained 
also here using drawing 3 explains the case where processing is performed, 
when processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0120] In step S91 , in step S81 of drawing 22 , the control section 31 of IC card 1 
receives the common key version information-requirements command which the 
reader writer 2 transmitted, and transmits common key version information to the 
reader writer 2 through the communications department 21 in step S92. 
[0121] A control section 31 judges whether the mutual recognition initiation 
command which received the mutual recognition initiation command which the 
reader writer 2 transmitted, and was received in step S93 in step S94 is a mutual 



recognition initiation command with a common key in step S84 or step S85 of 
drawing 22 in step S93. 

[0122] In step S94, when it is judged that it is a mutual recognition initiation 
command with a common key, after a control section 31 controls the common 
key processing section 42 of the cipher-processing section 33, starting mutual 
recognition with a common key, sharing the reader writer 2 and the session key 
Kses and completing mutual recognition, processing is ended in step S95. 
[0123] In step S94, when it is judged that it is not a mutual recognition initiation 
command with a common key (that is, it is a mutual recognition initiation 
command by the public key), after a control section 31 controls the public key 
processing section 41 of the cipher-processing section 33, starting the mutual 
recognition by the public key, sharing the reader writer 2 and the session key 
Kses and completing mutual recognition, processing is ended in step S96. 
[0124] By processing explained using drawing 22 and drawing 23 , IC card 1 and 
the reader writer 2 perform mutual recognition using a public key, when it is 
going to perform mutual recognition with a common key with a quick 
authentication rate first and mutual recognition with a common key cannot be 
performed (for example, when the version of a corresponding common key is old 
etc.). 

[0125] Mutual recognition by the public key is performed in processing of step 



S85 of drawing 22 , and step S96 of drawing 23 . The certificate of the reader 
writer 2 shown in drawing 24 (A) is memorized by SRA46 of the memory 103 of 
the reader writer 2. Moreover, the certificate of IC card 1 shown in drawing 24 (B) 
is memorized by SRA46 of the memory 32 of IC card 1 . 

[0126] As shown in drawing 24 (A) and drawing 24 (B), in each certificate The 
version number of a certificate, the serial number of the certificate which a 
certificate authority assigns, the algorithm and parameter that were used for the 
signature, The identifier of a certificate authority, the expiration date of a 
certificate, the reader writer 2, or the identifier of IC card 1 (ID), By making an 
irreversible Hash Function (data compression function) which used and 
explained drawing 5 to the public key Kpsp of the reader writer 2 or the public 
key Kpu of IC card 1 , and the whole message act It consists of digital signatures 
which created the message digest and were created by enciphering a message 
digest with the private key Ksca of a certificate authority. 

[0127] Next, signature generation processing is explained with reference to the 
flow chart of drawing 25 . Here, the case where a digital signature is generated is 
explained using an elliptic curve cryptosystem method (ellipse DSA signature). 
Here, also in the reader writer 2, although the control section 31 of IC card 1 
explains the processing performed by controlling DSA signature generation / 
verification section 72 of the public key processing section 41, since same 



processing is performed, the explanation about processing of the reader writer 2 
is omitted. 

[0128] In step S101, a control section 31 recognizes a parameter required for 
signature generation processing, namely, p - the characteristic, and a and b - 
the multiplier of an elliptic curve, and an elliptic curve - let a message and Ks as 
a private key and let [ y2=x3+ax+b and G / the base point on an elliptic curve, 
and r ] G and KsG be public keys for the order of G, and M. 
[0129] In step S102, DSA signature generation / verification section 72 of the 
public key processing section 41 is the random-number generation section 
which is not illustrated, it generates u used as 0<u<r, u Doubles a public key G 
using the random number u generated in step S102 in step S103, and computes 
V used as V=uG= (Xv, Yv). 

[0130] In step S104, DSA signature generation / verification section 72 
computes c=Xv mod r, and judges whether it is c= 0 in step S105 based on the 
count result of S104. In step S105, when it is judged that it is c= 0, as for 
processing, return and processing after it are repeated by step S102. 
[0131] It computes [ f=SHA -1 (M) which is / in / when it is judged in step S105 
that it is not c= 0 / step S106 / the hash value of Message M, (SHA-1 being used 
as a Hash Function here), and ], it sets to step S107, and DSA signature 
generation / verification section 72 is d= [(f+cKs) /u], mod r is calculated. 



[0132] In step S108, DSA signature generation / verification section 72 judges 
whether it is d= 0 based on the count result of step S107. In step S108, when it is 
judged that it is d= 0, as for processing, return and processing after it are 
repeated by step S102. In step S108, when it is judged that it is not d= 0, in step 
S109, DSA signature generation / verification section 72 sets signature data to (c, 
d), and processing is ended. 

[0133] Thus, the reader writer 2 which received the digital signature generated in 
IC card 1 carries out processing which verifies the digital signature which 
received. Signature verification processing is explained with reference to the 
flow chart of drawing 26 . Here, also in IC card 1 , although the control section 
101 of the reader writer 2 explains the processing performed by controlling DSA 
signature generation / verification section 72 of the public key processing section 
41, since same processing is performed, the explanation about processing of IC 
card 1 is omitted. 

[0134] In step S111, a control section 101 recognizes a parameter required for 
signature generation processing, namely, p - the characteristic, and a and b - 
the multiplier of an elliptic curve, and an elliptic curve - let a message and Ks as 
a private key and let [ y2=x3+ax+b and G / the base point on an elliptic curve, 
and r ] G and KsG be public keys for the order of G, and M. 
[0135] DSA signature generation / verification section 72 of the public key 



processing section 41 judges whether they are 0<c<r and 0<d<r in step S112 
based on the value of c and d of the received signature data. 
[0136] In step S112, when it is judged that they are not 0<c<r and 0<d<r, 
processing progresses to step S120. In step S112, when it is judged that they 
are 0<c<r and 0<d<r, in step S113, DSA signature generation / verification 
section 72 computes f=SHA -1 (M) which is the hash value of Message M, and 
calculates h= 1-/d mod r in step S1 14. 

[0137] Using the value of h computed in step S1 14, in step S1 15, DSA signature 
generation / verification section 72 computes h1=fh and h2=ch mod r, and 
computes P=(Xp, Yp) =h1 G+h2KsG in step S116. 

[0138] In step S117, DSA signature generation / verification section 72 judges 
whether the value of P is an infinite point from the calculation result of step S1 16. 
Here, when the value of P is an infinite point, it is possible to judge whether the 
value of P is an infinite point in step S1 16 based on the ability not to acquire the 
solution of hi G+h2KsG. In step S1 1 7, when it is judged that P is an infinite point, 
processing progresses to step S120. 

[0139] In step S117, when the value of P is judged not to be an infinite point, in 
step S118, DSA signature generation / verification section 72 judges whether 
c=Xp mod r is realized. In step S118, when it is judged that c=Xp mod r is not 
realized, processing progresses to step S120. 



[0140] In step S1 18, when it is judged that c=Xp mod r is realized, in step S1 19, 
DSA signature generation / verification section 72 judges the received signature 
to be the right, and processing is ended. 

[0141] When it is judged that p is an infinite point in step S117 when it is judged 
in step S1 12 that they are not 0<c<r and 0<d<r, or when it is judged in step S1 18 
that c=Xp mod r is not realized, in step S120, it judges that DSA signature 
generation / verification section 72 of the received signature is not right, and 
processing is ended. 

[0142] Moreover, authentication key discernment is performed using the key 
information for authentication that it explained using drawing 7 (B). When two or 
more authentication keys by which the level division was carried out to a certain 
service are stored, authentication processing is preferentially started from the 
key of a low, and the version of the key is judged, and when the version of the 
key is old, it may be made to perform authentication processing using the 
authentication key of higher level. 

[0143] Next, authentication key discernment processing of the reader writer 2 in 
case two or more authentication keys which are performed in step S3 of drawing 
15 and by which the level division was carried out to a certain service are stored 
with reference to the flow chart of drawing 27 is explained. 
[0144] In step S131, through the communications department 91, the control 



section 101 of the reader writer 2 transmits a key level negotiation command to 
IC card 1, and receives key version information V in level N which IC card 1 
transmits through the communications department 91 in step S143 of drawing 
28 mentioned later in step S132. 

[0145] In step S133, a control section 101 judges whether the level N of key 

version information V which received in step S132 is N> 0. In step S133, when it 

is judged that it is not N> 0, processing progresses to step S137. 

[0146] In step S133, when it is judged that it is N> 0, in step S134, a control 

section 101 judges whether the key version information in level N is effective 

based on key version information V which received in step S132. 

[0147] In step S134, when it is judged that the key version in level N is not 

effective, in step S135, a control section 101 transmits a NACK signal to IC card 

1 through the communications department 91 , and, as for processing, return and 

processing after it are repeated by step S132 (namely, when it is judged that the 

version of a key is old). 

[0148] In step S134, when it is judged that the key version in level N is effective, 
in step S136, a control section 101 transmits an ACK signal to IC card 1 through 
the communications department 91, and processing is ended. 
[0149] In step S133, when it is judged that it is not N> 0, in step S137, the same 
processing as step S16 of drawing 16 is made, and processing is ended. 



[0150] Next, with reference to the flow chart of drawing 28 , the authentication 
key discernment processing of IC card 1 performed in parallel to authentication 
key discernment processing of the reader writer 2 explained using drawing 27 is 
explained. In addition, although IC card 1 explained also here using drawing 3 
explains the case where processing is performed, when processing is performed 
with IC card 1 explained using drawing 4 , same processing is performed 
fundamentally. 

[0151] In step S141, in step S131 of drawing 27 , the control section 31 of IC 

card 1 receives the key level negotiation command which the reader writer 2 

transmitted, and sets the present key level N to N= 1 in step S142. 

[0152] In step S143, a control section 31 transmits key version information V in 

the present key level N and its level to the reader writer 2 through the 

communications department 21, and receives the data which the reader writer 2 

transmitted in step S135 or step S136 of drawing 27 in step S144. 

[0153] In step S145, a control section 31 judges whether the signal received 

from the reader writer 2 is an ACK signal in step S144. In step S145, when it is 

judged that the signal received from the reader writer 2 is not an ACK signal, in 

step S146, a control section 31 considers as N=N +1, and judges whether the 

value of N is over the predetermined maximum level in step S147. 

[0154] In step S147, when it is judged that N is not over the maximum level, as 



for processing, return and processing after it are repeated by step S143. In step 
S147, when it is judged that N is over the maximum level, in step S148, a control 
section 31 sets current level to N= 0 (N= 0 shall show an exception condition), 
and, as for processing, return and processing after it are repeated by step S143. 
[0155] In step S145, when it is judged that the signal received from the reader 
writer 2 is an ACK signal, processing is ended. 

[0156] Although the processing about IC card 1, service discernment of the 
reader writer 2, and authentication key discernment was explained using 
drawing 15 thru/or drawing 28 For example, when equipping with IC card 1 and 
performing registration of new service, and when deletion of service was 
performed to the reader writer 2-11 for service registration explained using 
drawing 2 , as it explained to it using drawing 10 In order to perform 
authentication processing using the authentication key Kreg for service 
registration memorized by the memory 103 of the reader writer 2-11 for service 
registration, it is not necessary to use mutual recognition processing which was 
explained using drawing 15 thru/or drawing 28 . 

[0157] Next, with reference to the flow chart of drawing 29 , service registration 
processing of the reader writer 2-1 1 for service registration is explained. 
[0158] In step S151, through the communications department 91, the control 
section 101 of the reader writer 2-11 for service registration transmits a service 



registration command to IC card 1, performs IC card 1 and mutual recognition 
with the key Kreg for service registration in step S152, and shares the session 
key Kses. 

[0159] In step S153, a control section 101 transmits a free-area check command 
to IC card 1 through the communications department 91, and receives the data 
transmitted from IC card 1 in step S175 or step S176 of drawing 30 mentioned 
later in step S154. 

[0160] In step S155, a control section 101 judges whether the signal received 
from IC card 1 is an ACK signal in step S154. When the signal received from IC 
card 1 is judged to be an ACK signal, in step S155, in step S156, a control 
section 101 controls the common key processing section 112 of the 
cipher-processing section 102, makes the registration data newly registered into 
the memory 32 of IC card 1 encipher with the session key Kses, and transmits 
encryption data to IC card 1 through the communications department 91 in step 
S157. 

[0161] The notice of the completion of data registration to which IC card 1 
transmitted the control section 101 in step S180 of drawing 30 later mentioned in 
step S158 is received through the communications department 91, the service 
deletion authorization flag by service authentication is transmitted in step S159, 
and processing is ended. 



[0162] In step S155, when the signal received from IC card 1 is judged not to be 
an ACK signal, in step S160, the same processing as step S16 of drawing 16 is 
made, and processing is ended. 

[0163] Next, with reference to the flow chart of drawing 30 , the service 
registration processing of IC card 1 performed in parallel to service registration 
processing of the reader writer 2-1 1 for service registration in which it explained 
using drawing 29 is explained. In addition, although IC card 1 explained also 
here using drawing 3 explains the case where processing is performed, when 
processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0164] In step S171, the control section 31 of IC card 1 receives the service 
registration command which the reader writer 2-11 for service registration 
transmitted in step S151 of drawing 29 through the communications department 
21. 

[0165] A control section 31 performs mutual recognition with the key Kreg for 
service registration, shares the session key Kses with IC card 1, and receives 
the free-area check command which the reader writer 2-11 for service 
registration transmitted in step S153 of drawing 29 through the communications 
department 21 in step S173 in step S172. 

[0166] In step S174, a control section 31 judges whether the free area for 



registration data is in SRA46 of memory 32. In step S174, when it is judged that 
there is no free area, in step S175, a control section 31 transmits a NACK signal 
through the communications department 21 at the reader writer 2-1 1 for service 
registration, and processing is ended. 

[0167] In step S174, when it is judged that there is a free area, in step S176, a 
control section 31 transmits an ACK signal to the reader writer 2-1 1 for service 
registration through the communications department 21 . 

[0168] A control section 31 receives the encryption data which the reader writer 
2-1 1 for service registration transmitted through the communications department 
21, controls the common key processing section 42 of the cipher-processing 
section 33 in step S178, and makes the encryption data received in step S177 
decode in step S157 of drawing 29 in step S177 using the session key Kses. 
[0169] A control section 31 supplies the data decoded with the session key Kses 
to memory 32, and makes them register into the Service Individual Info field and 
SRT45 of SRA46 in step S178 in step S179. 

[0170] In step S180, through the communications department 21, a control 
section 31 notifies the completion of registration of data to the reader writer 2-1 1 
for service registration, and sets it to step S181 . In step S159 of drawing 29 , the 
reader writer 2-11 for service registration transmitted. The service deletion 
authorization flag by service authentication is received, a service deletion 



authorization flag is set as the Service Individual Info field of SRA46 of memory 
32, and processing is ended. 

[0171] Next, with reference to the flow chart of drawing 31 , the service deletion 

of the reader writer 2-1 1 for service registration is explained. 

[0172] In step S191, the control section 101 of the reader writer 2-11 for service 

registration receives the input of the service ID corresponding to the service to 

delete which the user inputted using the input section 106 (here, the service 

whose corresponding service ID is ID_S shall be deleted). 

[0173] In step S192, the same processing as step S152 of drawing 29 is made. 

A control section 101 judges whether the error message which transmitted ID_S 

region Delete command to IC card 1, and IC card 1 transmitted to it in step S205 

of drawing 32 mentioned later in step S194 was received through the 

communications department 91 in step S193. 

[0174] In step S194, when it is judged that the error message was received, in 
step S195, the same processing as step S16 of drawing 16 is made, and 
processing is ended. In step S194, when it is judged that an error message was 
not received, processing is ended. 

[0175] Next, with reference to the flow chart of drawing 32 , the service deletion 
of IC card 1 performed in parallel to the service deletion of the reader writer 2-1 1 
for service registration explained using drawing 31 is explained. In addition, 



although IC card 1 explained also here using drawing 3 explains the case where 
processing is performed, when processing is performed with IC card 1 explained 
using drawing 4 , same processing is performed fundamentally. 
[0176] In step S201, the same processing as step S172 of drawing 30 is 
performed. The control section 31 of IC card 1 judges whether the justification of 
ID_S region Delete command which received in step S202 was verified in step 
S193 of drawing 31 in step S202 by receiving ID_S region Delete command 
which the reader writer 2-11 for service registration transmitted, and checking 
whether there are any data corresponding to ID_S region in step S203 etc. 
[0177] In step S203, when it is judged that the justification of ID_S region Delete 
command was verified, in step S204, a control section 31 deletes the field 
corresponding to ID_S of memory 32 from SRT45 and SRA46, and processing is 
ended. 

[0178] In step S203, when it is judged that the justification of ID_S region Delete 
command was not verified, in step S205, a control section 31 transmits an error 
message to the reader writer 2-11 for service registration through the 
communications department 21, and processing is ended. 
[0179] Service deletion explained using drawing 31 and drawing 32 can also be 
performed with the general reader writer 2-12 and IC card 1. With reference to 
the flow chart of drawing 33 , the service deletion of the general reader writer 



2-12 is explained. 

[0180] In step S211, service discernment processing of the reader writer 2 
explained using drawing 16 or drawing 18 is performed, in step S212, 
authentication key discernment processing of the reader writer 2 explained using 
drawing 20 , drawing 22 , or drawing 27 is performed, and the same processing 
as step S193 of drawing 31 is performed in step S213. 

[0181] In step S214, the control section 101 of the general reader writer 2-12 
receives the signal which IC card 1 transmits in step S227 or step S228 of 
drawing 34 mentioned later. And in step S215 and step S216, the same 
processing as step S15 of drawing 16 and step S16 is performed, and 
processing is ended. 

[0182] Next, with reference to the flow chart of drawing 34 , the service deletion 
of IC card 1 performed in parallel to the service deletion of the general reader 
writer 2-12 explained using drawing 33 is explained. In addition, although IC card 
1 explained also here using drawing 3 explains the case where processing is 
performed, when processing is performed with IC card 1 explained using 
drawing 4 , same processing is performed fundamentally. 

[0183] In step S221, service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and authentication key 
discernment processing of IC card 1 explained using drawing 21 , drawing 23 , 



or drawing 28 is performed in step S232. 

[0184] In step S223, a control section 31 receives ID_S region Delete command 
which the general reader writer 2-12 transmitted through the communications 
department 21 in step S213 of drawing 33 . In step S224, the same processing 
as step S203 of drawing 32 is performed. 

[0185] In step S224, when it is judged that the justification of a command was 
not verified, processing progresses to step S228. In step S224, when it is judged 
that the justification of a command was verified, in step S225, a control section 
31 judges whether the service deletion authorization flag is set as the Service 
Individual Info field of SRA46 of memory 32. 

[0186] In step S225, when it is judged that the service deletion authorization flag 
is not set up, processing progresses to step S228. In step S225, when it is 
judged that the service deletion authorization flag is set up, in step S226, the 
same processing as step S204 of drawing 32 is made, in step S227, a control 
section 31 transmits an ACK signal to the general reader writer 2-12 through the 
communications department 21 , and processing is ended. 
[0187] In step S224, when it is judged that the justification of a command was 
not verified, or when it is judged in step S225 that the service deletion 
authorization flag is not set up, in step S228, a control section 31 transmits a 
NACK signal to the general reader writer 2-12 through the communications 



department 21, and processing is ended. 

[0188] Next, service acquisition processing of the general reader writer 2-12 
performed when a user receives the service registered into IC card 1 by the 
general reader writer 2-12 with reference to the flow chart of drawing 35 is 
explained. 

[0189] In step S231, service discernment processing of the reader writer 2 
explained using drawing 16 or drawing 18 is performed, and authentication key 
discernment processing of the reader writer 2 explained using drawing 20 , 
drawing 22 , or drawing 27 is performed in step S232. 

[0190] In step S233, the control section 101 of the general reader writer 2-12 
transmits the data demand command of ID_S region to IC card 1 through the 
communications department 91 . 

[0191] A control section 101 receives the data transmitted from IC card 1, 
controls the common key processing section 112 of the cipher-processing 
section 102 in step S235, and makes the encryption data received in step S234 
decode in step S245 of drawing 36 mentioned later in step S234 using the 
session key Kses. A control section 101 performs predetermined data 
processing, such as subtraction of cybermoney, and addition, using the decoded 
data, and processing is ended. 

[0192] Next, with reference to the flow chart of drawing 36 , the service data 



acquisition processing of IC card 1 performed in parallel to service data 
acquisition processing of the general reader writer 2-12 in which it explained 
using drawing 35 is explained. In addition, although IC card 1 explained also 
here using drawing 3 explains the case where processing is performed, when 
processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0193] In step S241, service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and authentication key 
discernment processing of IC card 1 explained using drawing 21 , drawing 23 , 
or drawing 28 is performed in step S232. 

[0194] In step S243, the control section 31 of IC card 1 receives the data 
demand command of ID_S region which the general reader writer 2-12 
transmitted in step S233 of drawing 35 through the communications department 
21. In step S244, a control section 31 controls the common key processing 
section 42 of the cipher-processing section 33, makes the data registered into 
the field corresponding to ID_S of memory 32 encipher using the session key 
Kses, and transmits the data enciphered through the communications 
department 21 to the general reader writer 2-12 in step S245, and processing is 
ended. 

[0195] Moreover, in IC card 1 and the general reader writer 2-12, when the 



permission information corresponding to SRT45 explained using drawing 8 
when transfer of the information about a certain service was made is recorded, it 
is possible to deliver and receive information about the service except transfer of 
the present information being made. With reference to the flow chart of drawing 
37 , the service data acquisition processing of the general reader writer 2-12 
performed during activation of the service corresponding to the service ID of 
those other than ID_S is explained. 

[0196] In step S251 thru/or step S254, the same processing as step S231 of 
drawing 35 thru/or step S234 is performed. In step S255, the data which the 
control section 101 of the general reader writer 2-12 received from IC card 1 in 
step S254 judge whether it is a NACK signal. 

[0197] In step S255, when the received data are judged not to be a NACK signal, 
in step S256, the same processing as step S235 of drawing 35 is performed, and 
processing is ended. In step S255, when the received data are judged to be a 
NACK signal, the same processing as step S16 of drawing 16 is made, and 
processing is ended. 

[0198] Next, with reference to the flow chart of drawing 38 , the service data 
acquisition processing of IC card 1 performed in parallel to service data 
acquisition processing of the general reader writer 2-12 in which it explained 
using drawing 37 is explained. In addition, although IC card 1 explained also 



here using drawing 3 explains the case where processing is performed, when 
processing is performed with IC card 1 explained using drawing 4 , same 
processing is performed fundamentally. 

[0199] In step S261 thru/or step S263, the same processing as step S241 of 
drawing 34 thru/or step S243 is performed. In addition, at step S261, 
authentication of different service ID_T from service ID_S shall be performed. In 
step S264, the control section 31 of IC card 1 judges whether ID_S region 
corresponding to the data demand command received to SRT45 and SRA46 of 
memory 32 in step S263 is registered. In step S264, when it is judged that ID_S 
region is not registered, processing progresses to step S269. 
[0200] When it is judged in step S264 that ID_S region is registered, a control 
section 31 In step S265, from the permission information field corresponding to 
ID_S of SRT45 of memory 32, acquire the permission information on ID_S and it 
sets to step S266. It judges whether reading of the data of ID_S is permitted at 
the time of ID_T authentication (). That is, it judges whether read-out 
authorization of data, i.e., ro, and rw are indicated in the permission information 
field corresponding to ID__S of SRT45 at the time of authentication by ID_T. In 
step S266, when it is judged that reading of data is not permitted, processing 
progresses to step S269. 

[0201] In step S266, when it is judged that reading of data is permitted, in step 



S267 and step S268, the same processing as step S244 of drawing 36 and step 
S245 is performed, and processing is ended. 

[0202] In step S264, when it is judged that ID_S region is not registered, or when 
it is judged in step S266 that reading of data is not permitted, in step S269, a 
control section 31 transmits a NACK signal to the general reader writer 2-12 
through the communications department 21, and processing is ended. 
[0203] After data are acquired from IC card 1 by the general reader writer 2-12 
and predetermined processing is made by service data acquisition processing in 
which it explained using drawing 35 thru/or drawing 48 , the general reader 
writer 2-12 performs processing which writes in data to the predetermined field 
of SRT45 of the memory 32 of IC card 1 , pr SRA46 if needed. 
[0204] Next, with reference to the flow chart of drawing 39 , service data write-in 
processing of the general reader writer 2-12 is explained. 

[0205] In step S281, service discernment processing of the reader writer 2 
explained using drawing 16 or drawing 18 is performed, and authentication key 
discernment processing of the reader writer 2 explained using drawing 20 , 
drawing 22 , or drawing 27 is performed in step S282. 

[0206] The control section 101 of the general reader writer 2-12 In step S283, in 
order to write in the memory 32 of IC card 1 Control the common key processing 
section 112 of the cipher-processing section 102, make it encipher using the 



session key Kses, and the data transmitted to IC card 1 are set to step S284. 
The data enciphered as the data write command in step S284 are transmitted to 
IC card 1 through the communications department 91, and processing is ended. 
[0207] Next, with reference to the flow chart of drawing 40 , the service data 
write-in processing of IC card 1 performed in parallel to service data write-in 
processing of the general reader writer 2-12 in which it explained using drawing 
39 is explained. In addition, although IC card 1 explained also here using 
drawing 3 explains the case where processing is performed, when processing is 
performed with IC card 1 explained using drawing 4, same processing is 
performed fundamentally. 

[0208] In step S291, service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and authentication key 
discernment processing of IC card 1 explained using drawing 21, drawing 23, or 
drawing 28 is performed in step S232. 

[0209] In step S293, a control section 31 receives the data write command and 
encryption data which the general reader writer 2-12 transmitted in step S284 of 
drawing 39 through the communications department 21. A control section 31 
writes the data which were made to decode the data which controlled the 
common key processing section 42 of the cipher-processing section 33, and 
were received using the session key Kses, and decoded them in step S295 in 



step S294 in the service storing field corresponding to ID_S of SRT45 and 
SRA46 of memory 32, and processing is ended. 

[0210] Moreover, in IC card 1 and the general reader writer 2-12, when the 
permission information corresponding to SRT45 explained using drawing 8 
when transfer of the information about a certain service was made is recorded, it 
is possible to perform service data write-in processing about the service except 
transfer of the present information being made as well as service data 
acquisition processing in_which it explained using drawing 37 and drawing 38. 
With reference to the flow chart of drawing 41, the service data write-in 
processing of the general reader writer 2-12 performed during activation of the 
service corresponding to the service ID of those other than ID_S is explained. 
[0211] In step S301 thru/or step S304, the same processing as step S281 of 
drawing 39 thru/or step S284 is performed. And in step S305 and step S306, the 
same processing as step S15 of drawing 16 and step S16 is made, and 
processing is ended. 

[0212] Next, with reference to the flow chart of drawing 42, the service data 
write-in processing of IC card 1 performed in parallel to service data write-in 
processing of the general reader writer 2-12 in which it explained using drawing 
41 is explained. In addition, although IC card 1 explained also here using 
drawing 3 explains the case where processing is performed, when processing is 



performed with IC card 1 explained using drawing 4, same processing is 
performed fundamentally. 

[0213] In step S311 thru/or step S313, the same processing as step S291 of 
drawing 40 thru/or step S293 is performed. In addition, at step S311, 
authentication of different service ID_T from service ID_S shall be performed. In 
step S314 and step S315, the same processing as step S264 of drawing 38 and 
step S265 is made, and in step S314, when it is judged that ID_S region is not 
registered, processing progresses to step S320. 

[0214] In step S316, a control section 31 judges whether the writing of data is 
permitted to service of ID_S at the time of ID_T authentication (that is, it judges 
whether write-in authorization of the data at the time of ID_T authentication, i.e., 
rw, is indicated in the permission information field corresponding to ID_S of 
SRT45). In step S316, when it is judged that the writing of data is not permitted, 
processing progresses to step S320. 

[0215] In step S316, when it is judged that the writing of data is permitted, in step 
S317 and step S318, the same processing as step S294 of drawing 40 and step 
S295 is performed. In step S319, a control section 31 transmits an ACK signal to 
the general reader writer 2-12 through the communications department 21, and 
processing is ended. 

[0216] In step S314, when it is judged that ID_S region is not registered, or when 



it is judged in step S316 that the writing of data is not permitted, in step S320, a 
control section 31 transmits a NACK signal to the general reader writer 2-12 
through the communications department 21, and processing is ended. 
[0217] As explained above, in order to equip the general reader writer 2-12 with 
IC card 1 and to receive various services in it, authentication processing must be 
performed using the common key defined for every service, or a public key. 
These authentication keys are often upgraded for maintenance of security (that 
is, a key is changed). A user must be made to have to upgrade the 
authentication key registered into IC card 1 which he has managed to the 
authentication key of the version near the newest as much as possible by 
equipping with IC card 1 the reader writer 2-14 for version up explained using 
drawing 2, or the general reader writer 2-12, and performing key version up 
processing later mentioned using drawing 43 thru/or drawing 47. 
[0218] Next, with reference to drawing 43, key version up processing of the 
reader writer 2-14 for version up performed using the key for version up (key 
Kake_vup for version up explained using drawing 6 and drawing 14) defined for 
every service is explained. 

[0219] In step S331, service discernment processing of the reader writer 2 
explained using drawing 16 or drawing 18 is performed, and authentication key 
discernment processing of the reader writer 2 explained using drawing 20, 



drawing 22, or drawing 27 is performed in step S332. 

[0220] In step S333, the control section 101 of the reader writer 2-14 for version 
up controls the common key processing section 112 of the cipher-processing 
section 102, makes the authentication key ID corresponding to the 
authentication key which upgrades encipher using the session key Kses, and 
transmits to IC card 1. In step S334, a control section 101 receives the signal 
which IC card 1 transmits in step S355 or step S360 of drawing 44 mentioned 
later. 

[0221] In step S335, a control section 101 judges whether the signal received 
from IC card 1 in step S334 is an ACK signal. In step S335, when the received 
signal is judged not to be an ACK signal, processing progresses to step S339. In 
step S335, when the received signal is judged to be an ACK signal, in step S336, 
read the authentication key Kake from memory 103, control the common key 
processing section 112 of the cipher-processing section 102, it is made to 
encipher it as the latest version information corresponding to the authentication 
key which upgrades using the session key Kses, and a control section 101 
transmits to IC card 1 through the communications department 91 . 
[0222] And in step S337, the signal transmitted in step S359 or step S360 of 44 
which IC card 1 mentions later is received. In step S338, the same processing as 
step S335 is made, and in step S338, when the received signal is judged to be 



an ACK signal, processing is ended. In step S335 and step S338, when the 
received signal is judged not to be an ACK signal, in step S339, the same 
processing as step S16 of drawing 16 is made, and processing is ended. 
[0223] Next, with reference to the flow chart of drawing 44, the key version up 
processing of IC card 1 performed in parallel to key version up processing of the 
reader writer 2-14 for version up in which it explained using drawing 43 is 
explained. In addition, although IC card 1 explained also here using drawing 3 
explains the case where processing is performed, when processing is performed 
with IC card 1 explained using drawing 4, same processing is performed 
fundamentally. 

[0224] In step S351, service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and authentication key 
discernment processing of IC card 1 explained using drawing 21, drawing 23, or 
drawing 28 is performed in step S352. 

[0225] A control section 31 receives the enciphered authentication key ID which 
the reader writer 2-14 for version up transmitted in step S333 of drawing 43 
through the communications department 21, controls the common key 
processing section 42 of the cipher-processing section 33, and makes the 
received data decode in step S353 using the session key Kses. In step S354, a 
control section 31 judges whether the authentication key ID corresponding to 



ID_S of SRT45 and SRA46 of memory 32 exists based on the decoded data. In 
step S354, when it is judged that the authentication key ID does not exist, 
processing progresses to step S360. 

[0226] When it is judged in step S354 that the authentication key ID exists, a 
control section 31 In step S355, through the communications department 21, 
transmit an ACK signal to the reader writer 2-14 for version up, and it sets to step 
S356. In step S336 of drawing 43, the reader writer 2-14 for version up 
transmitted. The latest version information and the authentication key Kake 
which were enciphered are received through the communications department 21, 
the common key processing section 42 of the cipher-processing section 33 is 
controlled, and the received version information is made to decode using the 
session key Kses. 

[0227] In step S357, the version information received based on the data which 
the control section 31 decoded judges whether it is the right (that is, is he a 
version higher than the version information of the already held authentication 
key or not?). In step S357, when version information is judged not to be right, 
processing progresses to step S360. 

[0228] When judged as the right, in step S357, version information a control 
section 31 Control the common key processing section 42 of the 
cipher-processing section 33, make the authentication key Kake decode using 



the session key Kses, write in the field to which the authentication key Kake in 
SRA46 of memory 32 is indicated, and it sets to step S359. An ACK signal is 
transmitted to the reader writer 2-14 for version up through the communications 
department 21, and processing is ended. 

[0229] In step S354, when it is judged that the authentication key ID does not 
exist, and when version information is judged not to be right in step S357, in step 
S360, a control section 31 transmits a NACK signal to the reader writer 2-14 for 
version up through the communications department 21, and processing is ended. 
[0230] Moreover, in IC card 1 and the general reader writer 2-12, when transfer 
of the information about a certain service is made, it sets. When the permission 
information corresponding to SRT45 explained using drawing 8 is recorded, It is 
possible to perform key version up processing about the service except transfer 
of the present information being made as well as service data acquisition 
processing in which it explained using drawing 37 and drawing 38, and service 
data write-in processing in which it explained using drawing 41 and drawing 42. 
With reference to the flow chart of drawing 45, the key version up processing of 
the general reader writer 2-12 performed during activation of the service 
corresponding to the service ID of those other than ID_S is explained. 
[0231] In step S371 and step S372, the same processing as step S331 of 
drawing 44 and step S332 is performed. And the control section 101 of the 



general reader writer 2-12 In step S373, transmit to IC card 1 through the 
communications department 91, and the version up command of the 
authentication key of the service corresponding to ID_S is set to step S374. In 
step S397 of drawing 46 mentioned later, or step S405 of drawing 47, the signal 
which received the data which IC card 1 transmits and was received from IC 
card 1 in step S375 judges whether it is an ACK signal. 

[0232] In step S375, when the received signal is judged not to be an ACK signal, 
processing progresses to step S382. In step S375, when the received signal is 
judged to be an ACK signal, in step S376 thru/or step S382, the same 
processing as step S333 of drawing 43 thru/or step S339 is made, and 
processing is ended. 

[0233] Next, with reference to the flow chart of drawing 46 and drawing 47, the 
key version up processing of IC card 1 performed in parallel to key version up 
processing of the reader writer 2-14 for version up in which it explained using 
drawing 45 is explained. In addition, although IC card 1 explained also here 
using drawing 3 explains the case where processing is performed, when 
processing is performed with IC card 1 explained using drawing 4, same 
processing is performed fundamentally. 

[0234] In step S391 and step S392, the same processing as step S351 of 
drawing 44 and step S352 is performed. In addition, at step S391, authentication 



of different service ID_T from service ID_S shall be performed. In step S393, a 
control section 31 receives the version up command of the authentication key of 
\DJS which the reader writer 2-14 for version up transmitted in step S373 of 
drawing 45. 

[0235] In step S394 and step S395, the same processing as step S264 of 
drawing 38 and step S265 is made, and in step S394, when it is judged that ID__S 
region is not registered, processing progresses to step S405. 
[0236] In step S396, a control section 31 judges whether version up of the 
authentication key of ID_S is permitted at the time of ID_T authentication (that is, 
it judges whether authorization of vup at the time of ID_T authentication is 
indicated in the permission information field corresponding to ID_S of SRT45). In 
step S396, when it is judged that version up of an authentication key is not 
permitted, processing progresses to step S405. 

[0237] In step S396, when it is judged that version up of an authentication key is 
permitted, in step S397, a control section 31 transmits an ACK signal to the 
reader writer 2-14 for version up through the communications department 21 . 
[0238] And in step S398 thru/or step S405, the same processing as step S353 of 
drawing 44 thru/or step S360 is performed, and processing is ended. 
[0239] Next, with reference to the flow chart of drawing 48 thru/or drawing 51, 
the intermodule communication explained using drawing 13 is explained. 



Intermodule communication is performed by IC card 1 explained using drawing 4, 
and the reader writer 2-1 3 for intermodule communications. Here, it considers as 
the common key module 122 which explained the communications department 
51 of IC card 1 explained using drawing 4, and the common key service 
processing section 52 using drawing 13, and explains as a public key module 
121 which explained the communications department 53 which explained using 
drawing 4, and the public key service processing section 54 using drawing 13. 
[0240] First, the intermodule communication in the case of differing the session 
key which the common key module 122 shares with the reader writer 2-13 for 
intermodule communications, and the session key which the public key module 
121 shares with the reader writer 2-13 for intermodule communications with 
reference to the flow chart of drawing 48 is explained. 

[0241] In step S411, the reader writer 2-13 for intermodule communications 
performs service discernment processing of the reader writer 2 explained using 
drawing 16 or drawing 18, and in step S412, the public key module 121 of IC 
card 1 performs service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19, and it shares the session key Ksesl 
with the inter module reader writer 2-13 between the public key modules 121 . 
[0242] In step S413 the reader writer 2-13 for intermodule communications 
Service discernment processing of the reader writer 2 explained using drawing 



16 or drawing 18 is performed, and it sets to step S414. The common key 
module 122 of IC card 1 Service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and the session key 
Kses2 is shared with the inter module reader writer 2-13 between the common 
key modules 122. 

[0243] In step S415, the control section 101 of the reader writer 2-13 for 
intermodule communications judges whether two cards, the public key module 
121 and the common key module 122, ID were in agreement based on the card 
ID of IC card 1 obtained in service discernment processing of the reader writer 2 
performed in step S411 and step S413. In step S415, when it is judged that Card 
ID is not in agreement, in step S416, the same processing as step S16 of 
drawing 16 is performed. 

[0244] In step S41 5, when it is judged that two cards ID are in agreement, in step 
S417, the control section 101 of the reader writer 2-13 for intermodule 
communications transmits a module data migration command to the public key 
module 121. 

[0245] In step S418, the control section 61 of the public key module 121 receives 
a module data migration initiation command from the reader writer 2-13 for 
intermodule communications, controls the common key processing section 42 of 
the cipher-processing section 33, makes the data which move encipher with the 



session key Ksesl, is step S419 and transmits encryption data to the reader 
writer 2-13 for intermodule communications. 

[0246] In step S420, the control section 101 of the reader writer 2-13 for 
intermodule communications decodes the data which controlled the common 
key processing section 112 of the cipher-processing section 102, and were 
received with the session key Ksesl , makes data encipher with the session key 
Kses2 in step S421, and transmits to the common key module 122. In step S422, 
the control section 61 of the common key module 122 makes the data which 
controlled the common key processing section 42 of the cipher-processing 
section 63, and were received decode with the session key Kses2, and the data 
decoded in step S423 are saved to the field to which memory 62 corresponds, 
and it uses them. 

[0247] Next, with reference to the flow chart of drawing 49, intermodule 
communication when the session key which the common key module 122 
shares with the reader writer 2-13 for intermodule communications, and the 
session key which the public key module 121 shares with the reader writer 2-13 
for intermodule communications are the same is explained. 
[0248] In step S431, the reader writer 2-13 for intermodule communications 
performs service discernment processing of the reader writer 2 explained using 
drawing 16 or drawing 18, and in step S432, the public key module 121 of IC 



card 1 performs service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19, and it shares the session key Ksesl 
with the inter module reader writer 2-13 between the public key modules 121 . 
[0249] In step S433 the reader writer 2-13 for intermodule communications 
Service discernment processing of the reader writer 2 explained using drawing 
16 or drawing 18 is performed, and it sets to step S434. The common key 
module 122 of IC card 1 Service discernment processing of IC card 1 in which it 
explained using drawing 17 or drawing 19 is performed, and the session key 
Ksesl is shared with the inter module reader writer 2-13 between the common 
key modules 122. 

[0250] In step S435 thru/or step S439, the same processing as step S415 of 
drawing 48 thru/or step S419 is performed. And in step S440, the control section 
101 of the reader writer 2-13 for intermodule communications transmits the 
received data to the common key module 122. After enciphering the decoded 
data with the session key Kses2, it transmitted to the common key module 122, 
but since the common key module 122 also has the session key Ksesl, these 
processings become unnecessary [ decode the received data with the session 
key Ksesl , and / the module ] in step S420 and step S421 of drawing 48, here. 
[0251] In step S411, the control section 61 of the common key module 122 
decodes the data which controlled the cipher-processing section 63 and were 



received with the session key Ksesl, and the data decoded in step S422 are 
saved to the field to which memory 62 corresponds, and it uses them. 
[0252] Next, although the session key which the common key module 122 
shares with the reader writer 2-13 for intermodule communications differs from 
the session key which the public key module 121 shares with the reader writer 
2-13 for intermodule communications with reference to the flow chart of drawing 
50 The reader writer 2-1 3 for intermodule communications the session key which 
the common key module 122 has It enciphers with another [ which the public key 
module 121 has ] session key, and the intermodule communication in the case 
of being made as [ supply / the public key module 121 ] is explained. 
[0253] In step S451 thru/or step S456, the same processing as step S411 of 
drawing 48 thru/or step S416 is performed. That is, the session key Ksesl is 
shared with the inter module reader writer 2-13 between the public key modules 
121, and the session key Kses2 is shared with the inter module reader writer 
2-13 between the common key modules 122. 

[0254] In step S457, the control section 101 of the reader writer 2-13 for 
intermodule communications controls the cipher-processing section 102, makes 
the session key Kses2 encipher with the session key Ksesl , and transmits to the 
public key module 121. The control section 61 of the public key module 121 
takes out the session key Kses2 by making the data which controlled the 



common key processing section 42 of the cipher-processing section 33, and 
were received decode with the session key Ksesl. 

[0255] In step S459, the same processing as step S417 of drawing 48 is 
performed. In step S460, the control section 61 of the public key module 121 
enciphers the data which move with the session key Kses2, and transmits 
encryption data to the reader writer 2-13 for intermodule communications. 
[0256] In step S461, the same processing as step S440 of drawing 49 is 
performed. And in step S462 and step S463, the same processing as steps 
S422 and S423 of drawing 48 is performed. 

[0257] Namely, in step S420 and step S421 of drawing 48, decode the received 
data with the session key Ksesl , and although it transmitted to the common key 
module 122 after enciphering the decoded data with the session key Kses2 Here, 
like the processing explained using drawing 49, since the common key module 
122 and the public key module 121 can obtain the same session key Kses2, it is 
not necessary to perform these processings. 

[0258] And with reference to the flow chart of drawing 51 , the public key module 
121 and the common key module 122 share common private key K_common, 
and perform mutual recognition using it, and the intermodule communication in 
the case of sharing the still more common session key Kses is explained. 
[0259] In step S471 and step S472, by common private key K_common, the 



public key module 121 and the common key module 122 perform mutual 
recognition, and share the session key Kses. In step S473, the reader writer 
2-13 for intermodule communications offers only the channel of the mutual 
recognition in step S471 and step S472 (namely, as for sharing of a session key, 
the public key module 121 and the common key module 122 are not performed). 
[0260] In step S474, the same processing as step S417 of drawing 48 is 
performed. In step S475, the control section 61 of the public key module 121 
makes the data which control the common key processing section 42 of the 
cipher-processing section 33, and move encipher with the session key Kses, 
and transmits encryption data to the reader writer 2-13 for intermodule 
communications. And in step S476 thru/or step S478, the same processing as 
step S421 of drawing 49 thru/or step S423 is performed. 

[0261] Namely, in the intermodule communication explained using drawing 51, 
the reader writer 2-13 for intermodule communications does not encipher the 
data by which it is only offering the channel of data and intermodule 
communication is carried out, or does not decode them. 

[0262] A series of processings mentioned above can also be performed with 
software. The software is that the program which constitutes the software installs 
the computer built into the hardware of dedication, or various kinds of programs, 
and is installed in a general-purpose personal computer etc. from a record 



medium possible [ performing various kinds of functions ]. 
[0263] This record medium is constituted apart from a computer by the package 
media which are distributed in order to provide a user with a program and which 
consist of the magnetic disk 115 (a floppy (trademark) disk is included) with 
which the program is recorded, an optical disk 116 (CD-ROM (Compact 
Disk-Read Only Memory) and DVD (Digital Versatile Disk) are included), a 
magneto-optic disk 117 (MD (Mini-Disk) is included), or semiconductor memory 
1 18, as shown in drawing 9. 

[0264] Moreover, in this specification, even if the processing serially performed 
in accordance with the sequence that the step which describes the program 
recorded on a record medium was indicated is not of course necessarily 
processed serially, it is a juxtaposition thing also including the processing 
performed according to an individual. 
[0265] 

[Effect of the Invention] According to the data storage of this invention, a data 
store method, and the program currently recorded on the record medium The 1st 
service ID corresponding to [ control I/O of the data to an information processor, 
control the data storage corresponding to two or more services, and ] the 1st 
service of two or more services I/O of data is permitted when I/O of the data 
about the 1st service is controlled by processing of an input/output control step. 



Since storage of the 2nd service ID corresponding to the 2nd service of two or 
more services was controlled It can make it possible to perform in parallel 
transfer of the data about other services permitted beforehand, securing security, 
when transfer of the data about predetermined service is being performed. 



DESCRIPTION OF DRAWINGS 
[Brief Description of the Drawings] 

[Drawing 1] It is drawing for explaining the communication mode and 
authentication method of an IC card and a reader writer. 

[Drawing 2] It is drawing for explaining the relation of a card publisher, a service 
provider, and a card holder. 

[Drawing 3] It is the block diagram showing the configuration of an IC card. 
[Drawing 4] It is the block diagram showing the configuration of an IC card. 
[Drawing 5] It is drawing for explaining drawing 3 and the cipher-processing 
section of drawing 4 . 

[Drawing 6] It is drawing for explaining SRA of drawing 3 and drawing 4 . 
[Drawing 7] It is drawing for explaining the key information for authentication 
stored in SRA of drawing 6 . 



[Drawing 8] It is drawing for explaining SRT of drawing 3 and drawing 4 . 
[Drawing 9] It is the block diagram showing the configuration of a reader writer. 
[Drawing 10] It is drawing for explaining the memory information on the reader 
writer for service registration. 

[Drawing 11] It is drawing for explaining the memory information on a general 
reader writer. 

[Drawing 12] It is drawing for explaining the memory information on the reader 
writer for intermodule communications. 

[Drawing 13] It is drawing for explaining intermodule communication. 

[Drawing 14] It is drawing for explaining the memory information on the reader 

writer for version up. 

[Drawing 15] It is a flow chart for explaining authentication processing of an IC 
card and a reader writer. 

[Drawing 16] It is a flow chart for explaining service discernment processing of a 
reader writer. 

[Drawing 17] It is a flow chart for explaining service discernment processing of 
an IC card. 

[Drawing 18] It is a flow chart for explaining service discernment processing of a 
reader writer. 

[Drawing 19] It is a flow chart for explaining service discernment processing of 



an IC card. 

[Drawing 20] It is a flow chart for explaining authentication key discernment 
processing of a reader writer. 

[Drawing 21] It is a flow chart for explaining authentication key discernment 
processing of an IC card. 

[Drawing 22] It is a flow chart for explaining authentication key discernment 
processing of a reader writer. 

[Drawing 23] It is a flow chart for explaining authentication key discernment 
processing of an IC card. 

[Drawing 24] It is drawing for explaining a certificate. 

[Drawing 25] It is a flow chart for explaining signature generation processing. 
[Drawing 26] It is a flow chart for explaining signature verification processing. 
[Drawing 27] It is a flow chart for explaining authentication key discernment 
processing of a reader writer. 

[Drawing 28] It is a flow chart for explaining authentication key discernment 
processing of an IC card. 

[Drawing 29] It is a flow chart for explaining service registration processing of the 
reader writer for service registration. 

[Drawing 30] It is a flow chart for explaining service registration processing of an 
ICcard. 



[Drawing 31] It is a flow chart for explaining the service deletion of the reader 
writer for service registration. 

[Drawing 32] It is a flow chart for explaining the service deletion of an IC card. 
[Drawing 33] It is a flow chart for explaining the service deletion of a general 
reader writer. 

[Drawing 34] It is a flow chart for explaining the service deletion of an IC card. 
[Drawing 35] It is a flow chart for explaining service data acquisition processing 
of a general reader writer. 

[Drawing 36] It is a flow chart for explaining service data transmitting processing 
of an IC card. 

[Drawing 37] It is a flow chart for explaining service data acquisition processing 
of a general reader writer. 

[Drawing 38] It is a flow chart for explaining service data transmitting processing 
of an IC card. 

[Drawing 39] It is a flow chart for explaining service data write-in processing of a 
general reader writer. 

[Drawing 40] It is a flow chart for explaining service data write-in processing of 
an IC card. 

[Drawing 41] It is a flow chart for explaining service data write-in processing of a 
general reader writer. 



[Drawing 42] It is a flow chart for explaining service data write-in processing of 
an IC card. 

[Drawing 43] It is a flow chart for explaining key version up processing of the 
reader writer for version up. 

[Drawing 44] It is a flow chart for explaining key version up processing of an IC 
card. 

[Drawing 45] It is a flow chart for explaining key version up processing of a 
general reader writer. 

[Drawing 46] It is a flow chart for explaining key version up processing of an IC 
card. 

[Drawing 47] It is a flow chart for explaining key version up processing of an IC 
card. 

[Drawing 48] It is a flow chart for explaining intermodule communication 
processing. 

[Drawing 49] It is a flow chart for explaining intermodule communication 
processing. 

[Drawing 50] It is a flow chart for explaining intermodule communication 
processing. 

[Drawing 51] It is a flow chart for explaining intermodule communication 
processing. 



[Description of Notations] 

1 IC Card 1 Reader Writer 21 Communications Department 31 Control Section, 
32 memory 33 Cipher-processing section 41 Public key processing section, 42 
Common key processing section 43 The other cipher-processing sections 45 
SRT, 46 SRA 51 Communications department 52 Common key service 
processing section, 53 Communications department 54 Public key service 
processing section 61 Control section, 62 Memory, 63 Cipher-processing 
section 91 Communications department 101 Control section, 102 
Cipher-processing section 103 Memory, the 111 public-key processing section 
112 Common key processing section 113 The other cipher-processing sections 
105 Display 106 Input section 121 Public key module 122 Common key module 
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sg i ©+>•- ex i Dt> MExw^iwiwxT-y^ojaa 

tciDWSBS 1 ©-9— tfXtcHf£Hui3f ? -*©Aaj;>3 

^w^nT^i,^fcSuiBx-^©Atii^*w^n 
*, tatata©-*- trx©9^©^2©-9— extern 
r 2 ©if- ex i D©B**iwffli , r*ffi2©iBttiW 

mm t t- * ©g §£*t ?f-^ iBtt^Bffl ©^d 
tufBtitfsiaggBKttf s» iuEx-*©Am7j£» 
aa©*- extant *r-*©ett*iM»-r*is 1 

©EttfMSPXxy:/^ 

soaass©-*-ex©3%©» i ©-9-exK*hS-r5 

3! 1 ©-9"- ex IDt, itufBAffi^»Xx-y7©MS 
fc JEWESS 1 ©-9— HXtcM-f SMfBx-^Atii*) 50 
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jb'WH* ftT «^KWE7 f - * ©AttS^j^ffW Z ft 

5, MiBjfa©-9--trx©5-£©m2©^-extcflfS 

1-5^2 ©-9- ex I D©aBtt£&J9p-f £$2©E1glM 

to x f y t tf c t % ® t -r 5 n y e a - * 

[5Si«©fiMa&l^] 
[0 00 1] 

[^©JS-TSStB^!?] *fg^fi. 7*-*EttSHfe 
cktfx-^EIS^ffitMb, WAfef, ICA-Fi:, U 
-??'{*£t)\ 3rS©-9— extc^5-r-^©S§ 

[0 00 2] 

Xr AlCfcl^T, I C (Integrated circuit) i)— F© 

mmtmnahT^Zo ic*-f«, &«$aa£iT?c 

P U (Central Processing Unit) J f> > fflafCi&g&x 

^©jMSffl^tfa I C*-Kfctt, HRfc, *©*»iK 
[0 0 0 3] IC*-Fh, U-^7>T^OBSiCtt« 

Mffl¥KS»*T* CTfcfcS, IC*-K 

ftV) „ BS#{fc(i, S*«tC«, ^©JW^Aft^x 

SiJ©i^tcB#glK.-5 ^rffl*^t)-&Ti7t>ft 
So ^©«t3»)Bff-PAft«A«*\ if©**tH©i 
^A<Bt&AT&5fr£^-f©aW7/V:*9X*Ai:8 
T'feSo Bg^{b(C*3t>T, X^*r6ffc«>©»^Bg^ 

gsi-st), -re)^ft5A^a*HA^i:*5. 

[0 0 0 4] ^IS»»Stt» «§^TAlC6t>T, 

v\ *©*5©iB#ft«tt£iflu a^ati, «©aff 
?.a^a%*«)S©«^ffiT'«^^^ n-»«©^^ 
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[0005] £®®®msx7-Mt. fc*<D#mm*§ 

£(c <fc 3 * v *- 5>©KiE«fJ6*#o, t V> -5 fUj6*£ 
[0 0 0 6] TisfJimZtte. n : f-*-jW*V 1 7<< 

fiMT'^lteff^tf, GUtf, RSA (Rivest, Sh 
amir, Adleman) &PJ8B£^>XxA©i§£fc:{i, $ 

k, rare* onm) "WWfk«ff5J tf^?;H 
x-^tCflLT, /vyi/affi£®»h *n%a»»T?i« 
[0 0 0 7] CO»€*«liEr*KH:, £NM*ftH/*5 

ct*t>%, «^ft»fca#»©taaij« t xn»*5 20 

©**©iEatt*III*K:ttifrscfc*'T?*«. tua 
MSlTI«^X*jEL<a7C-rSC4:jb^#» 

T# S J: 5 %Ti?f)l'm&*rff£?5 ttt» *©"«7 1 

[0 0 0 8] *fc, f-^<D^!T7ttfII<Dfel«I8S 

WiLftS3fOffllS, ISSE^ (CA (Certificate 
Authority) ) tV^o 
[0 0 0 9] 40 

imumvtLmt-r&ma tse*» 1 c*-F*ja 

tf&%>frz>X'1b%<, LfrLiZ&Z, MZ.l£. [B] — © I C 
fcTX fcWF T*— 9"- k:*X£§lt£> C t tfT-£ 5<i: 9 * 
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[0 0 10] *«WttC©J:9*ttJHfc«*T*«nfe 
m£©-?-tfXKII8-f3r-*£>g§£5! 

ffirLXfto C t*nimt?%&<DX&5o 
[0011] 

awtim^^ ^w-exKttjs-tsx-*© 

E1t**J«rr«aiOE«lli!lfP¥®i:, ISOtr-ex 
cD?^©3flco+r-t"X£ttJS1-63U©+r-t:XI D 

zoxtoiimmzftx^smGteT-zvxmiiffff 
nisti*, iifto-9— trxo^^cD^2<D-9— extw 

fSf 5^2 0-9— (fx I DcDlB1«%»1-5^2C0H21i 

[0012] £2©iBitfM»#Sfctt, m2©-9— trx 

K BB-r a 7 * -tr xmcoMMic HI" 5 tit *B<DlBtI*frJflSl£ 
[0 0 13] £2©B1tlffl»¥8fctt, SI52©+r-l£X 

i d#, m i co-9--ex I DKWLTaSSqtrS* 

£\ ii»o^2o-9— trxi Doeu«MtP«#. ^2 

W-exiD^\ ^lW-t*XIDtC»LT10t 
[0 0 14] *«WOx-*C11*tttt> ffifSMS^B 

^m\mm.mm^7-'y-ft, its©-*- exo^^o 
»i<o-9— ifxfcwjs-raaio^-- ex 1 Di:, xm 

Wl7r7 y^fflafcJ; 0^ 1 cut-ifxtcH-rsx 
-^OAtH^^»?tiT^a^tCr-^cDAtB^A^ 

jt#r.582©tf-t;x 1 D©!BS*sijai-r§S2c>ffi 

[0 0 15] #%$(Df2li&Wcffii*£ttT^57 p n? 

'r-Zmm.ikMmzm l <DE1S»Xx-yyi:, j» 
|g[(0-9--k*X«9-&(0^ 1 O-t-eXfCjtJS-rsm 1 (0 

^£0^2(0-9— t:X(cWJS-r5^2£D+r-lfX I DOfB 
Wkfmt %>m 2 OE«SJ»Xr y «1 1 5r1t 

[0 0 16] *J8BOf-?EIKffl, x-^IBit^j* 
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«»©^lfXKtt(Sr*r-*©E11#ffl»Sft» tit 
%t<D?-\'7.<D : j*><Dm 1 ©tf-eafcJfJS-f 3» 1 © 
■y-tfXIDi, AW*flPJ»^r«y^Offlat«kOSl 

%©sg2©tf-fcrxfc*f£T 5M52©-y-trx i D©t2 

[0 0 17] 

C56W©*»©«»] WT, 0%#P.8LT, *5SW©H 
[0 0 18] Hit, I C*-KfcU-y9'('*OBMI 

5) c IWf«i3^iMWJfiy-y5-r*2-l 14, i c 

- f i t$mmxmm^\ ^mm^xmmm 

9o **W»PBWtlSy-#?-<* 2-314, 

iI<S*ff</\ £l»ti*5£T?jlHI*ffao 20 

[0019] fiaj^tf, i c a- f i icsmiwsftos: 
to *> c t ft T- * 5 y y f a - f * t* ©-y-- e 
x*aflt-rsfl»«jb^snTfeD» i ca- f i 

TIR©e$tfl£*iJfflT£>ig£ J *>, I C A- F He, IDA 

^nssaatcfc^-m, #aMQK&ji*»jsy-*5 
^^2-1 *ffli>T, pmmc&z4mM<Dmmmit> 

[0 0 2 0] tfljxtf, I C 7J— F 1 IC, *?V*-©tJ- 30 
■tfAWH Lfc^p n p©«»©®a%tT a H if (4, 4MB 

mj5$K «fc ossE^fT frn, ssBaa»a»#iffl*<frft»*. 
«iwm'j-?7^^ 2-2 m^x. $mm 
mm&£mmttfcv—?74* 2-3 zm^-c. &ml 

T5i©%ff 3 <fc 5 tc LT & <tV\ 
[00 2 1] Ml fcfc^Ttt, IMMK^BKtffSU- 

2^ * 2 - 1 jbmzmA&mmMis v-^-izz- 40 
3#, fl»j©y-^7-f^fcbTKWLTv^5^ &s 
(cjsdt, ioo'j-^^t, ffi^©a©^s^ 

[0 0 2 2] &{C, H2*fl!^T, *- K»(t«» tf- 
exffi{8#, fcitf*- FffJ*#fcOV^T8ttWT5o 

[0 0 2 3] rt-F58fr#l 1(4, -t-exjft&gl 2 
(C, I C*-Fl*fi8jf5*-F«fc#l 3(C*TL 
T, I C*-Fl*fflv>/cy--tfX©ffi{«£fT9Ci:£ 
§2<5jb, I C A- F 1 ©58fT*«2l/fc*- KfiMt* 1 
3(C*iLT, I C A- F 1 £ftfrr*o 50 
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[0024] *-F«fT*i -9— ex©ggpj£ 
exjf«#i 2 a:, *-K«tf#i iwrr 
-s-y- trxfi«ffly-^7W*2-i nc 
*-k«##i sfc^rs-y-extcftjs-rsx-* 

(06£ffl<^T&i&1~ ^Service Individual Info) £ 

#1 2^wr^0^bftt/v^-vf;l/3ytf^-^ftif 

-2^*2-1 ncSS-r*«kdtUTt>±^U * 
^ u- * w^mr-mm? % «k 5 (c l t t a v \, 
[0025] *~F«»#i3tt, -y-trxanfflD- 

^7**2-1 lfcffl^T, *-K«ff#l l*>5«ff 
«nft I C ft— F 1 (C ftS* ex*as?-&5 

ct^T'tSo •y-exs^ffly -^7^^2-1 1 
1 c*-f 1 ©-y-txa^sttatcovTtt, 02 

[0 0 2 6] ^LT, *-FfiM$#l 3(4, S#g#© 

i c a- f 1 £ag£ftT^s^-ex©i»£fiWc 

-*7-f*2-l 1, tKtt, -y-lfXg#i#l 2tf 

©IC*-Flfre>, ex*fiiJ»«H**«:4:jb^# 

«. i ca-fi tfxearay-^7>r*2- 1 

l©-y-tTXiJ^®aico^Tt4, H3 1feJ:tfH3 
2, I C A— F 1 t — 'J — ?2 - 1 2 ©-y— If 
X»fflafCOV^Tl4, 03 3fcJ:lh"0 3 4 ^fflV^TtS 

[0 0 2 7] tfc, A-K««f# 1 3«, I C 

a-fuc, tfv*- y-exty;^ F-y- ex 
*M*nT*»)» *n^ti©«iflwwi«, ica-f 
i ©jc-nf'no-y-if ^fcBB-r5flj«K82»snTt#^ 
ttWT, «?v^,-©ffiii©-gp^, ^y^-YFwfflffl 

^a-yl/HiiMffly- ^7-^^2-1 3%ffl^T, g# 
g#© I C A- F 1 ©, 01 3*fflV^T»ar54JBB» 
* v^a -;l/ 1 itji^i/ a -;1/©HT% t ->*a -;1/Hii 
SZmfi ? ^ ZCttfT'ZZo -;l/P^fflflffl 'J - 

^f^2-l 3(4, «3»73:££, »BBtt^S©2* 

a-M^Iiffi 1 ;-^ *2- 1 3 t©ffia(COV>T 
(4, 0 4 8 71^0 5 1 *fflVTaa-r<5o 
[0 0 2 8] MIC, A-Fffi}f#13l4, £#)LTL3: 

^, -y-trx««#i 2««Ba-rs-iRy-^7'f*2 

-12, fet<(4, ^->'Hy77 7 p ffl l J-^7-f^2 
-14£ffl^T, g^i#©I C*-KlK2S«nT 

5 0 I C*-F1 ^->*3y7'y/ffl'J-^7-l'^2 
- 1 4 t©S^-> 7 3y7-y^'Saa(i:ot,^T{4, 04 3 
fc4:tf4 4^ffl</^T, I CA-Fl t-f&V-'??* f 
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2-i 2 tow^-i/ByT-yf&miz-D^Tit, 04 

571S4 7*ffl^TSaEf* 0 
[0 0 2 9] 03(4, I C*-K 1 OilS^trny 

[0030] ic*-Kitt, y-*5-f*2 (y-y 

^-f*2-171S2-3, t,L<«y-^'C^2-l 

(4, Cti6*tt*LT, V—ffv'fjiZtmtZMt 
f 3) fc<Dilfl*fT39<ltf 2 l x-^aSrUff 
t5I C*-K*aa»2 2^6*«SnTV^„ 10 
[003 1] fflfig(5 2 1 (4, ttJfrf 3 I C A- K 1 i)\ 
0 1 *fflWl«iLft#ilBBa»*l!SU-W'fj' 

2 - k t l < B^MMA&gmtti&i y * 2 - 
2-z»*s«£. ^s«s«aawfsy-^'('^2- 
Kii< mmm^rmn^) -9=7 4 $2-2 

5c t/t, iSffgP2 1 «, i c a- f 1 # % 11 1 zm^ 

- 1 , & 

.j; tfiNMk^&n ttttis y - ^ 2 - 2 0*4 e. 
?, ttMA&n wte y - * 2 - 3 1 commie & 20 

*f{SLTt^*£, #««!Sftii^fSy-^^^2 
- 1, fc L < ItflMflnkA&Mftttft y - * 2 - 2 

hwhsu-*?* * 2 - 3 tmmt^>rcib<Dwmf 

[0032] mm&z i«, v—?5<{#2fre>mmi< 
ftfcr-**seu sflufcx-**^ mz.if, as 

K (Amplitude Shift Keying) ^BPSK (Binary Pha 
se Shift Keying) £ffli,>TMIf £ftTV^t§-&, 

©saatcjey, §{iL.fcr-*£ffliiu ic*-Kja 30 
agP2 2o$uffligP3 1 ewers fcfcttc, ica-f 

ASK^BPSK^ffl^rraSU y 

[0 0 3 3] I C A— Kfl&Spff 2 2 (is 3?J9?p|5 3 1 , ^ 

t> ^t'J 3 2(c8EgSftT^3x-2£!**>AA,T\ 40 
ill«2 1*^UT, y-^^^2tCjMM-T5o 
[0 0 3 4] 3 2(4, #-F I D, t-fXil 

ffl£>§88iE&Kreg, ^fiE^<0^W^T**5CA_Pub^lBS$ 
ftT^S^'JfUgU 4, 08£ffl<^-a£$-f SServic 
e Relation Table (SRT) 4 5, 434:0*0 6 %ffl^T 
fUj/Rf ^Service Registration Area (S R A) 4 6T' 
flWESftTVS. 

[0 0 3 5] B|#5!iag|53 3(4, £BMttZl9fl!4 1 , « 
il8IS£iaaP4 2, ^OflfiOfc^^SM 3 T?*j8£ftT 

^5. ttBMMaaa$4 i7iM*offl!oi8^jaaa4 3^ so 
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[003 6] &(C, 04(4, I CA-FlO, 03i:S 
4«^fiK*^-r7D-y^0T**So 4*3, 04<DI CA 
- K 1 (Ct5V>T(4, H3Kfetf 

oxt, mm o 

[0037] icA-HiB, ttast-y- extent- -a 
y-^71'^2 t©a#*nfTf-5jHiaP5 1, anas 
5 losaatctoT^^nfcr-^oiaa^ff-rstt 
iia-y- e7.saagP5 2, i^-y-extciif §y- 

* 2 t Oii{t5r»T-r 531{Ig|$ 5 3 , ffllf SP 5 3 
©Me 4; o Tf§ £ftfcx- * ©j&afcHfrT 5£BMI 

[0038] mm® 5 1 (4, iNgfcfcs^aattisy-^ 
7^^2-1 tmm*ftorcib(D=i'f)\'Zffiz.T3so, 
mm&2 1 i c*-Hi^6as€« 

tl5f-?^, A S K^B P S K£flJ^T£§3£ft'TV 

«a»+r- exasw 5 2 mm® 6 1 t#ie-r 5 1 1 
t. (c , &a§t^- tr xiaasp 5 2 ©saatc «fc 0 s ft 

fcf-^, »$6 1 fre>{S3&2ft, ASK^BPS 

[0 0 3 9] «ffiSt+)--krxJ|iaSP5 2(4, &m»6 
1, ^^y6 2, 43«fctfH|^S!iag|56 3*^fi|fig$nT 

i/^o tm»e K4, aftass 1 ft^«?n/cf-^ 

(CftoT, Bt^-SaSSP 6 3*»J»U I C*-F 1 fc© 

^SEsaan(c^S4Jaa«riifT$-a-7c y , &£k£ u 

T, ^^'J 6 2Kim-$tlX^Z>7 : —?*mfr&f>.T:\ 

iHS«5i*^-LT. y-^7-Y*2cas©-r5. 

[0 0 4 0] ^'J6 2(4, 03^fflV^T8JB^Ufc^t 
U 3 2 fc|W|«ltC, ^t'JflS«4 4, SRT 4 5, 
S R A 4 6 T'^fiSc^ tXTl/^So J« ; ty^4 4(C(4, fs 
-FID, tf-trzB»fl!©BB»Kreg, *«ttfs tv' 
a - T'ffl V> & ft 5 ft K .common AM 

SftTVSo 

[004 1] B|^MagP6 3(4, ftffl^aa54 2, ^ 
OflS©BS^Jaa»4 3T«««ftT^5. -T4t»%, « 

aa+j— exjaaaps 2(c*s^T(4, ^BBjttH-rs^ 

-Vf^SjOaUJSrVfcft, Bg^fflag|56 3tC(4, 03* 
ffl^TSttWLfcfiM««yi»4 1 tt«*5ftT^4l\ 
[0 0 4 2] aftai5 5 3(4, |f»ttS^BB«««y-^ 

7-r^2-2, S5u>(4, «»ic^Bi«»*y-^7-r 

?2-3t a«£ff 9rc46©m-;Utb< (4S«!ffl?^ 
IBATl/>*. affig|5 5 3fe, a<fg|5 2 1 i:|Biei(i:, 
(f, I CA-Flfr5>)M{B£ft5-r-*#, ASK^B 

p s K£ffl^TgH£ftT<^3t§-£, ms©saa(c<i; 
4 <D»j«P0 6 i fcttf&r * t fc €» tc, omm*- trxia 

agi55 4<Dtea(c4;y4fi)t^ftfc-r-^^, »g|56 1 
fr6{&S££ft, ASKfBPSK^l^HU 'J — 
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[oo4 3] &mmy-\zxi&m5 4 a, tmm 

K 6 2, fc<fcr/Rf*f#»3 3frt,ffil&24XT 

[0 0 4 4] #fC, 0 5^1/^, ^F^TOag|5 4 XT] 

[00 4 5] H5 (A) KmZftZ&oK. 'AfflMtim 
SP4 1 Eli, 0!l*ffx RSA (Rivest, Shamir, Adlema 

mttfioRS Ag££$-&fiEg|5 7 1^, DSA (Digi 
tal Signature Algorithm) ^S^fUffl LTg^tD^ 
fccktf&SE^rr? D S Am^m • ^SESP7 2*Mfx.e> 

[0 0 4 6] RS Ag££$-&tiEgl$7 1 T*«> 20© 
^C<fcoTBg^kfc«WT9o RSABg^TIi, 2 

[0 0 4 7] &3 2 0©*t&i^pfcq£>ilA/C\ 
an=pq?rSt<46So f LT> (p-1) x (q-1) UTT 
(p-1) X (q-1) £S(,HCiSt&lli5te£3lL>\ 

(i) mrct&mdzx&Zo 

Exd = 1 mod ( (p-1) x (q-1) ) • • • (1) 
TZt (e. n) tfi^gi, dmmMt%% 0 

[0 0 4 8] iM^Bf^bUT, B£^{bx-*C££fiX 
T31§£, (2) Srffl^So 

C =M ' mod n • • • (2) 

fife. Bgrff{t7*-*C*«#-f*«^ &<05£ (3) * 
M = C mod n • • • ( 3 ) 

[0 0 4 9] DS AS££J5K*ttSE»7 2KB, H^U 

ft^astejs»tfM*.&ftTv«. dsa«. dlp (di s 

crete Logarithm Problem;gtfdtt$^S) ©Bfttt^ 
-XfcL,/cElGamalW££&&Ll\ §£<D§££l60bi 

A7->alS (x-*JEE8Mft) KSHA-l (Secure Has 
h Algorithm - 1) C fcfcMHi: IT^5„ DSA 

^sti, *s8w&ii§8"e*sNisT wmisffliwmtm 

Jm : National Institute of Standards and Technolog 

y) n^zommtLxmmti. *@a» 

feWBMffi$ (Federal Information Processing Stand 
ard) FIPS PUB mtcfetbZtlfCo 

[0050] sfc, 05 (b) tc^ftsi^fc, 

8ISftapP4 2Kte, #J;L{£, DES (Data Encryption 
Standard) ftJiSi^i/X'r AtiSggSEMa^rtf -5 D 
ESMaSP7 3, RC5 (Rivest Cipher5) #j£(C<}: 

sgnsaafcfi? rc sjaaaw 4, md'aes (Ad 

vanced Encryption Standard) 7?^fC £.%UM®M*t'tt 
5 AE S£LS07 5^(§X?,nTI/^ 0 
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[00 5 1] D E S#iI8B|#i'XT.k«\ 1977^{CNI 
STTfftSSn, mimc*mM&W,£ (ANSI : American 

National Standards Institute) IC& D£PP{b£ft/c 
ttaiiBg^v'XxATfe^o DE S#a8|H^>XxA 

[0 0 5 2] D E SttiI8Rgr*fS/XxA«, x-££64 
bit#{4tCE«o TH|^fbt5cfct>*«^Saa^if 9 Bg^^> 
XrA-efe^o DES7;I/3'JXAtC*3^T«> Hg^ib 

fc, DES^jl^Bi^v-XxA-eti, HMi&lf-y httB 
KB t XORill»©ffl^^^-&iia^ 16088 9 jg L X v * 

aKffls-rscfctf-es*. tfcfctLSMbf set* 

HOattTSSia^n/cT^dfUXAT^O, DESf7 

[0 0 5 3] RCSfcti, RSA Data Securitytth, 
20 VtJ-f-a-* y yi»**#BK8LfcRCS/U -X<0#il 
«BS^^ST*»}, 1995*PK«3gS*lfco RC5it BJ 
^ft7o-y?-»MX, oT^ft©SI+|-'rX, fcctCMS* 
0m (Ttx-^SttCfcoT, e»y MsHEOa^te 
•5, Data dependent rotations (x— h0 

IE) 7;i/JUXA) ©99:/F%*rr*7ny»wrafl: 

TaSt&So f<D7n-y^t)--YXi:LTli, 32, 64. 12 
se-yhfcfcSCi: * *) . 7>» KftttOfr 6 25 
5, %«0fr 52048 If ? htT^ST?**. RC5 

©T/t'rJ'JX&ti&BBSft'TVT, RFC2040h LTA¥ 

30 -rsc fc#wca&*o 

[0 0 5 4] Sfc, AES/tfSf^ NISTlCkoTSSft 

fb, m^aaao^Sfcffi/v s-ofastttt^flrFLT 

V^o iCX\ NISTttDESMW>*&tttt©»&WP 
fcbT, AES«Jfi:*5Hg^S*£1SW!p&£l*b 

40 [0 0 5 5] fit, ^©ffi©Bf*t#iag|5 4 3«, CT^. 

7-c-W^xXFj ^-y-b-^V^x 

a**ft«-r««o» ^Bgasaaa54 itL<«ttJia 

ffi<OB|^S!iagP4 3fCti. 05 (C) iCrtZtlZZ? 

->aKSSHA-lcDSaa^iT5SHA-lS!iagi57 6, feilffB 
50 HBSE7 , Dh3;l/T«ffl?n5*ttaa**jaT5*tt 



(7) 

11 

a»£«»7 7>S>Httt&ft*a\ fcS^tt, 05 (D) 
3My->aMifcMD 5©J2LJI%iT-5MD 5$aSg|$7 8, 

[0 0 5 6] T^^l/SfclCfc^Ttt, 4^lffl»ie##S 

^*/l*&*ttSE»-t?8re LTlfc tfl L/-cp< >y -fe- v?** 
-l^xX F iMSnTtfc* >yb-^*i{C/N«y 

Kt^CttCcfct), *-y*-^**£tf&^£ftT^& 

[0 0 5 7] SHA-lttfijtOftS©;* «y -fcr-:»£>160bi 

DSA|8]fit, NISWB3?SLfcfc©T% NISTtC^oTFIPS 

puBiso t^46P,nfc 0 mmm.m (N544) tt, 

tCFIPS PUB 180fc¥8aLfctOi:J5:t3TI/>5o 
[0 0 5 8] f LT> MD5(i, )£< H&fCffifrftT^ 
§ * -y -fe- ->**V 5?x X F Wft7;l/=f U X*A© 5 ^© 1 
OT, RFC1321T ? $£8£ftT</->3o MD5li, 32bitn>' 
tTa-*±-eS5!i*J: < tWC* 3 J: 5 7/1/i'J XL 
WfctbbtlX^Zo SjWcMD4-»f>MD2 fcl/^, Slftl 
©7;lo'JX"2»fc355<, 

[0 0 5 9] 06£ffl^-£\ 03*5«J:a : 04;&ffl 30 

l^TSWELfcl C*-Fl©SRA4 6fcfe*fr£*lT^ 

[006 0] SRA4 6tt, I C ij— F 1 %:$M~tZ>3- 
— W, H2*ffl^TKWUfcH6U-^7-f *2 - 1 

5^22-1 1 *ffl^TB8£*ifci* «) fcKS-rsfc 

[0 0 6 1 ] -f£fc>£, S R A 4 6tCf±. ^© 1 C A- 40 
F 1 fC§li£ftTI,^+r-h*X©ti$BT'<fc3>Service In 
dividual Info 1 ftMNtfS^SftTfc'K •etl^ftOS 
ervice Individual Infofctt, -9--tfX©a»5:iW 

£/c#>©-9--t:x i d, ■y--e7.«{c^i6^46?.n/c, 

lO, &L<ttlga©!gHffi81Sfg (06{Cfett^Serv 
ice Individual Info ktcfct^Ttt, 171iSn©nil© 

maLmmmm , ^-ex^ttsfc&icfijfflsns+r 

fci6©|gaEg!Kake_vupi:, i&BCJ&CT, ISiE^tcJtr 

*H9»ftH#Ba*ftT^5. 50 
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[0 0 6 2] RfEfflttflHRKfi. 0)Jxtt\ IgfiElt I D, 

5„ tf-eXx-^fctt, a-+f I DfitMc, Se 
rvice Individual Info k#, 09*tt\ WpT*— 9"— 

Service Individual Info kft\ 0J;Ltt\ gfj&tL 

[0 0 6 3] 07*fflV>T, 0 6 ©Service Indi 

vidual InfoKSSSnSKSEffl«1WHeot^TWWr 

So 

[0 0 6 4] 07 (A) fCfcl^Ttt, nS^No. 1 fcitf 
nWgSNo. 2©^n ; fn{cMJCSLT, BUS ID, fg©/S 
->'3X I2IE^S, ffflfflfglEliKake, 33<fctf, <&g 
CJSUT, IW!S'r-*tfBS<*ftT^*. 07 (A) 
©J; o KBtlffl^lf $BaWSftT^S«£©K8E»» 
SUSQUKo^Ttt, H2 071SH2 4*flJVT«iW 

[0 0 6 5] 07 (B) iCfet^Ttt, nS$No. IT^SrR 
«No. 7©^tt€ftK*tfSLT, SEttlDs &©i^ 

<fct>\ j&BfcJSUT, SEf8«x-*tfB82ftT^5o 
0 7 (B) ©<fc-5tc, «<Dl/'W&£A,/£SSEffl«1tfR 

*^«nTi/^s*^oKSE«iisiMaKo^Ta, 0 
2 7 *5j:tf0 2 8 *m^x%mtZo 

[0 0 6 6] 08*fflVT> 03fcJ;l>*0 4£ffl 

^TWHHLfcl C*-KlOSRT4 5fc;|ftWSnTV 

[0 0 6 7] SRT4 5£(i, I D*- K 1 icmSL<OV 

g'J © -9- - If X © +r - \£ X x - ^ K W L T 7 * -fe X £ 
If "If 5fca©-?-*#eg<£ftT^S. S R T 4 5 
tt, I C*- F 1 KBaSftT^Stf-ex I DAW 
^tlTV>5ag'9--VfX I D7-T-/1/F (08(CfcV>T 
tt, +r-exi DATiMJ i: LTKWSnTV*) i:, 
?-n€tl©-9— tX I D fcm-f 5/^-5 -y->H Vlfffi 

[0 0 6 8] A-5>y->3>"liS©S^-ex I D7 
-C-rt/ Ffctt, agS^nTV^-9--lfX©1J--l:X I D 

7-t-^K»ctt, WiS-rs-y-- t:xtf*tT£ftT^3ii 

-eX{C7^-tX-r3CfctfT-£5-9--fc:X I Di:, if 

nTV^S*^ ^- = <y->3>1SSi:LT TrwJ ^12 
ii^tl, K*ffiL©##5JS*lTI/^i§£, /^-=-yi/ 
a^ffffitLT fr oj tflEfcStU g^-v'a^ 
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l"vupj tfKWSft*. r r wj t Troj liiM 
-tTX I D(ettLTI£pJ;*ft&</\tf, TrvvJ^Tvu 

pj ts&xf r r oj t r v u pj «, rac-9--ex i d 

[0 0 6 9] -f&ft^, SRT4 5(C, 08(C;^;*ftS 

^-3»5'Hyi«ifl'ffli«nT^*«^, ?-exi 

D#C^£ft3+f-exOl?fi : 4<{Cf4, 1 D 

tfBT^SftStf-eXfettLT, M&tfiU *5<fctf« 
t&^tffffWSft, +>— eXI DtfDT'^SftS 

tf-exO^fr'tncfc^Tfc, ^-k'XI DtfBT-S^ 

i d# ET^£fts+)--exo5ifi : 't'K, -9--ex i d 

tfDT'jrcSftSIJ— extent, T, RftfflU »*& 

-ex I Dtf ET'SSftS^-ex, -9— VfX I Dtf F 
T^^ns^-ex, +T-ex I DtfGT 5 ^;£ft5+>-- 

ex, &l<&, +>--ex i d*m T^£ft*-9--ex 

fcfc^Tfc, 5 y ->a $87 -r KK 

EKSftTVSIIHIHclS^T, ftSSO-9— ex I DK» 

[0070] cne><o/^-3-y->3>tB^©s®{i, i 
c fi— f i t, a#r5-9--ex*astf 5«£fcfTt> 

fts„ fftt>%. a— "W, -9— exBSWU-*^ 
* 2 - 1 1 *ffl<^T, gttiUAWf 3 I C *- F 1 

(cwlt, ex i D^FT^ns-y— ex*es 

-f31£\ 0IJ*(f, "9-ex I DA^GT'^^n5-9— e 

x^fT*Kasi$n, -9-ex i DtfHt^stis^- 
extfg&sftr^&vfc&tf, ggw-ex i D7w 
FO F tc fcfjESf 5/*— 3 >y ~> a >1f$g7 -;b Ffc 

a, -9--ex i D*^GT*^$n§-9--ex(c^js-r§/^ 

T, a— 9'tf, -9"-ex I D^HT'^^nS9"-ex«: 
I DA- F 1 fcBSLfc&, it- ex I Dtf FT^Sft 

5^-ex*7>y7 , r-F-r5ciK<fc«3, 9— exi 
d# FT-^ft-s^-exfcfl-r -9— exiDtfH 
■p*sn5-9--exo/<-5 vf3 ytnmzmm-rzc 

[00 7 1] #(C, 09(4, 'J-^7^^2<0M^ 
-T7n-y ^0T'$>-i)„ 

[007 2] y-^5-f*2tt» I C*-F 1 £<DjI{g 
[0 0 7 3] ii<lg|59 1(4, I C#-F 1 tOiifB/ji* 

taw l rc^g/tts i: ««a(ov^-rnoins»a*»ffl l 
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[0 0 7 4] iM»9 1(4* 1 C*-Flfr£)Hl£ft 
fc7*-**»iU SflLfcx-^tf, 0JxJi\ ASK 

p s K*ffli/^TS««nTv^5«^ m^ffiatc 

4.D, §ML/ct-*£«!SU U-^7-f*«iaffl59 

2 1 o nc«s&-r it tt>&. y-*f5-f*ft 
agP9 2©«iatc<fcD4fi8?nfc'r-?^ smpat i o 

lfr?>i$&Sn, A S K^BP S KSrffl^TMBU I 
10 C#-F 1 (c&fif S„ 

[0075] y-^7^*a&g»9 2ii, wio 
i , Hg^&agn o 2, ^t'j i 0 3, iifsapi 04, 

**ttl 0 5, *5<fctf AJlSB 1 0 6 4:9fii/jSc£ftT^ 

?>„ Mffligp 1 0 1 (4, mm&9 1 A^fla&^nfcT*-* 

t«£oT, WHtffiSWl 0 2*fBMU I C*-F 1 £ 

tSCT, ^9 1 0 3(ClE^£ftTl/>5-r-#£Sg#i& 
A,T% afia?9 1 £r/fLT, I C *- F 1 fCjMftLfc 

20 ttJSLfdl^, *-y H7-^^/t-bT, ffliggp 1 0 4 
tc Aft * ft fcHPJMt#© A**»t, C ft 5 <Dft*ff eft 

[0 0 7 6] ^fc, JlffgP 1 0 4 ict4, F7^7114 

tistt^ftTfeo, F9>m i ^aasftsasnx 

-<x^ i i 5, Tt-rVx^ i i 6, ftfiSStr-rX* i i 
7, &j;xf¥m#**v i i sitztT-zoig&zfi 

[0077] Bg^jaa^i o 2(4, m3*m^Tmwi> 

30 fcre#»aai3 3fcBltt<0«lJ«*^LT^5©-C, 

[0 0 7 8] t'tV 1 0 3fCt4, !C*-FltmS<0 

aaa*^fTf £fci&©«$WfBigsftT^5o ^oita 
(4, 9-^7^^ 2 1)\ mzzm^Twmhrc -9-e 
xiifflu-y'7-1'^2-1 1715^-5^3 yr-yfrn 

9-^-7^^ 2-1 4 0V-ffttcW^-r5 i £><DT*fe53b- 1 
fCi-pTS^So 01 OTbSEl 4%ffll/^T, -9"-ex 

-9*74 $2- 1 4 0^€'J 1 OSKIEIS^ftTV^x 
40 -^tCO^TIfJ^-TSo 

[007 9] 01 oK^sfts, -9--exegsffl9-^* 

7-Y^2-l l<D^t9 1 0 3(Ct4, IC*-F1<D^ 
t'J320SRA46 fCr-^^a^t L < ttHlJUfT 5 
*£Kffl^&ft5BE»n3#E*Sft &89BCJ6UT 
BSEa©liEW»*»!eit^ftTV>5) , I C 7j— F 1 icW 
5 fc tb <9#ar9-- e X tc Jt(&-r § Serv ice I nd i v i du 
al Infoi;n>3!ritfgaM£ftTl>3o 

[0080] 01 nc^^fts, -^9-^7-r^ 2- 

120^^9 10 3^(4, CO-IS 9 -^7-1'* 2- 1 

so 2T*Ma-r5ci:^pi^*-9— exfc^iS-r^-9-ex 
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£\ 1 2©^t'J 1 0 3fCfi, ff 

[00 8 1] 01 2t3?Sft4, t^a-^IBGWlfflU 
-27^*2- 1 3<D*tV 1 0 3tCtt, -SS'J-2*7 
-<*2 - 1 2 0«'J 1 0 3fCf3tt£ftT^Slt$g£|S] 

jaa-rsc tffnm%-*)--\£7sictti&t%-*)--\*x 1 d 10 

mm-$nx^% 0 zvz.-frfflmmtit, 01 
tizzoic mat/us** TS'&rmfs&v 2 tticn 

^$2-1 3(C X l«i?a-;H 2 1 0 
4%fflt^Tlft$bfc, I CA-F l<Dil{IgP5 3i5«fctf 

a-;H 2 2 (09*.fcf, H4*ffl^T»iWUfc I C#- 

f 1 <»mi9i$5 1 *5it>*ttaa-9— ex5aagi5 5 2tc» 
£f s) * 1 c a-h 1 *«*u IW^a 20 

-;H2I fc^ilSl^^a-;!/ 1 2 2 tof-^cli 

It, 0 4 8 7bS0 5 1 fcffl^T&jfrTSo 
[0 0 8 2] ?LT> 01 4K^«tl5. ^-^3^7 
7 7 p fflU-^-1'^2-l 4©^tiJ 1 0 3fcW\ S« 
Sftfc I C#- F 1 (Cgg?nTV^-9— vxoMMm 

+J--tfX I D£ttfST5^-i/* 3 i/7-y :/ffi§gtE^Kake 
_vup*3 J:tf|giiESlKake<DU X F#iB1t£ftTV5,> 30 
[0 0 8 3] I CA-F1 £V-? ; 7'f$2£t>mm* 

fc, I C*-Fl t*)-¥7JZZ1$W&MW.-f%tc#> 
tc, afflSr'fT o -9— ex^fflS^»J U tfx 
©BEfcfcfflSfcllJ^a&Btf**. 0 1 5©7a- 
^+-F5r#BgLT> 1 C#-F 1 tV—Sty-tZZO 

[0 0 8 4] $f\ Xf-y/'SUCfeK, U-^'T 
2 2 (£, <&g£j£bT\ I C A- F 1 fcaftbT&gfc 
r-*©fi£*fT5i:i:fcJ:D, Hi 6fe«fctfBll 8* 40 

fflv>Tft»t s 'J * 2 (D-9-- exi»jsaa*ji 

ff-r^o 2lCi3^X. ICA-Fl 

tt, &§£)SbT, U-^l'^fcambT&gfcx 

o^rftiE-rs i c a- f i co-9— ex»»jjaa*^ff -r 

[0 0 8 5] ^bT. Xf77*S 1 <0 l J-^7-l'^2O 
■9"-tfXisgiJ5aafe<J:y*X-r>y7'S 2©l CA-F 1© 
■9— £Xi©MatfIO#iS&7b/ct§^ Xr-vyS3t;: 
fct>T, U-*7>r*2H\ j&gfCjSCT, IC*-F 50 
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1 fcaftLT&g&r-^OigSfcfTP 0 

2 0, 02 2feJ:tfH2 7*fflV^TSBS-r*U-^^ 
*2©BiEWK3iJffla*||ff-r*. *bt\ Xr-y7°S 
4»CfeVT, ICA-Hltt, <&g£fSbT, U-^v 

2 fc5g©bT&g*r-*©iSS*?T 5 C tic J: 
t>, 02 K 0 2 3*JJ:lfB2 8*ffl^T&j£fS I C 

*- f i <Dmm.mmmw&*mft?Zo 

[0 0 8 6] SK, 016O7n-ft-h^#|gL 

a— ftfma©-*- ex^rA^u trxoutT 

S 1 Kfc^THfrSftSy-^'i'* 2©-9— ex»9J 

saatno^TUB^-r^o 

[0 0 8 7] >J-^7-r*2 0WJIWPl 0 Hi, Xt7 
1 1 (Cfc^T, I C#- F 1 KttU a«g|59 1 % 
A-LT, I C#-FfcffinvyF£2H8U X-r-vT'S 

1 2fC*5V<T> I CA-Fl^ACKff «IB£T£ 
0 1 2 2lC*5VT, IC*-Fl#aHI 

2 tcfc^r, a c KM^SMsnrt/^v^wwsn 

fc«£* ACKM^tfSMSftfcfcWWSnSI:-^ x 

[0 0 8 8] Xf77"S 1 2£:fc^T, A C Kffl 
©LfefcW*f*nfc«^ I C*-K 1 tf, 

>J-^?2fc«»?Mi^) , X-r-y^S 1 3tc 
feV^T, MMR 1 0 Hi, a— 1 0 6 

e,nfc-9--b*xtcs^v^T, a-wsatsif-ux 
fc»«-rs^- fx I D$\ aflg|59 1 *^lt, i c 

F 1 {Cjgft-f 3 0 
[0 0 8 9] Xr-y^S 1 4{Ci3V>T, »JSfg|5 1 0 1 

i ca-f i (ma?-r50 1 1 

OXf7 7S 2 5 tb<{iXx-y^S 2 6(^VT, I 

ca-Fitfgfflbfcft^) *§ffli-^o xt77si 

5tCfcl/^T, *Jffllg|51 0 lt±> Xx-y^S 1 4{c:fc^T 
SULfcx-^ti, ACKM^S^*W»r-r5o Xr 
>y^S 1 5tfcV>T, SfiL/cfi^AC Kfi^T'li* 
i/> (-rftt>-6NACKe#Tf*S) i:W»f*n/-c«^, 
Xf-^y^S 1 6tc*5«/^T, SJffllgPl 0 1 x^-^-y 
•b- i/{c*f (ST 5 r- ^ 5:^35 1 o Sfcm^LTS^ 

jaa^T-rs (-r^ct)^, jaaa, 01 sox 

f->y^S 3t(±JtS*l/->) o Xx-y7°S 1 5fCfeV>T, 

Wit, 01 5©Xf7 7°S 3(C3tCy 0 
[0 0 9 0] *C 01 7<D7n-f-\r-F%#BgL 
T> 0 1 5©Xf-y7'S 2 tc*5l/ ">T, 016£ffl^T!H 

w l fc 'j - 9=7 -r * 2 <d-9— e x^gijjaa t Mff l th 
nztiz, i c a- f i o^-exiigijsaafcoi^Titt 
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- f i icts^xmwmifrtiz&ot Lxmmtzft. 

0 4 Hm^TWffl bfc I C ij— F 1 iC&n xmmwmn 

[00 9 1] lfct, Xr-y^S 

2 1 Kfc^T, H 1 6©Xf'y^S 1 1 fcfeV>T, U- 
^^ilfLft I C*-K*UJ3Y>Kt, ilfl 
$2 lfcfl-btgffib, Xf--y7"S 2 2K*5^T, U- 

[0 0 9 2] »J»SB3 lti, Xr-y 7S 2 3 fcfc^T, 10 

01 6 ©Xr-y 7 S 1 3lOS^X, 'J-*7-f*2tf2! 
fib/c-9— IfX I D£\ ii{gg|52 l^LTSftU X 
ryys 2 41C*>^T, ex I Dti, IC 
*-F 1 ©*fJ&TS-t$>a— ;l/ (CCTlt, 0 3%ffl<^ 

TBMBbfc i c a- Fnasifzmmic-D^rmwLx 
zt>\ mz.i£, m^m^xmmLfzi c*-ki©« 

^-exjaag|55 2©«iJ 6 2&SVHi, £B8tt9— 

exjaiagpc^tu 6 2tcjtJS-rs) rttassn-rv 20 

§ 1 DT**5*^S*\ ?%t>%. Xx-y^S 2 3fC*5^ 
TSflLfc+J— ex I Dtf, 06£ffl</>Tl8BJ!LfcSR 

[0 0 9 3] Xf-y/S 2 4lCfct^T, Sfibfclt-e 

x i Dt)\ tis^-nmcmm-sftT^ztrnwiztirc 

if£, Xf-y^S 2 5fC*5VT, fMflHfiOS3 1 «, ffiffgC 
2l£ftbT, 'J-^7-Y^2{CACKM^*3M{iU 
JUfflti, 01 5©X-r'y^S 4fciitfo Xx-v7 p S2 4 

Cfcl^T, §MLfc^-eX I DA<, ^a-^ftfCg 

g^nri/^^tWBf^n/c:^ xf-y/s 2 6tcfc 30 

l^T, fW«3 Hi, 3ift^2 l*rtLT, V-?*^ 

^2fcNACKfl^iMffib, j&awrrsn* era 

fr^, 01 5©Xx-y7°S 4ia,Zj&£ „ 
[0 0 9 4] 0 1 8O70-ft-h^#Il 

T, eX{C*NSLT^3 I CA- F 1 t, H 

eX(CjtJSLTV>5'J-^7-l'^2fC*5^T, 
I C ft— F 1 fcy-^5-r*2*Wrortfr8:'? 
-exSrtttULT, U-^'T^2©^»1 0 5(CH 

ene^^-ex©^^, ^-tw^g-rs 

tf-exfcSNS'tfSCfcK.fcD, ^-exiSSiJ^fT^ 40 
01 5©X7--y7 P S 1 tCfc^TllfTStt 

[0 0 9 5] 'J -9=74% 2 ©SMffllgp 1 0 Hi, X-r-y 
7s 3 ncfc^r, +>--ex 1 D U X haMftn^y F 

ICA-FHC, 3ifiW9 1*^UTSS©U X-r 
•y7S 3 2K43VT, aarSSl 9<DXf77'S 5 2 

tcfc^T, i c a- f i tfiMdb/c, tt- ex i d>;x 

hSrSfSb/cfrgfr^WBrf £<, Xx<y^S 3 2fci>^ 
T, +f-ex I DUXh££{lbT^ft^£Wr£*lfc 50 
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X\ Xf'y/S 3 2©jt!lgtfi6l95g£ft5o 
[0 0 9 6] Xf7 7*S 3 2Cfc(/>T, It- If X I D D 
Xh££flb*:t¥Wr£ft/clI£, Xr-y^S3 3tcfc 

^t, mm&i o i «, sibfc-t-ex i duxfk 
mmznr^zy- exi d«, v-jr?j*2tm& 

LTV^5-9— ex*^*nT0->5*>S^ (T&fc>S, U 
-Z'yJ* 2©** 'J 1 0 3iCi3tt£ftT^3-9--ex 

[0 0 9 7] Xf77S 3 3fcH3</^T, Sfibfc+f-e 

xiDVxhtc u-^7-i'^m-9--ex*^nT 

^SfcfJ»r£nfcl§£-, Xr7 7*S 3 4Kfc^T, itHJflf 
SPlOHi, it- ex I DyXFfC^tftT^fdttJ&tt 
-ex«T-$5fr§fr«t§o Xr-y^S 3 4 
lc*5V>T, WJS-9--ex*WTHi*t> (t^lO 

7 tCjtt? 0 

[0 0 9 8] Xx-yX'S 3 4(C*3V^T, ftjtSlt-extf 

aaT»«i:wwf«nrc«^ mvi o ni, xf-y 
7 s 3 5(cfc^r, «»©»(5-9— ex*«^api 0 5 

K£jfr£tf*fcft©7*--*%±JfiU *^gPl 0 stem 
2jLT£*Stf, Xf7 7*S 3 6(Cfel/^T, AXlgfll 0 
6fr£, a— WSt^^-lfXOAA^tSo « 

swi, ■9--ex^n ; ?ntc, m^&mm^t^ris 
t, ex©5^*^, s^a©«fes^ 

[0 0 9 9] Xt'y/S 3 7 K*3VT, SJffllgP 1 0 1 
it, Xf'y^S 3 4fC*3t^T, WlS+J— ex^tcfclO 

T*si:?j»f?nfe«^H:, ext^-rsit 

-ex I D£, ZT-y-fS 3 4K*5VT, WJtSlt-ex 
*WT'3&5 fcfJSf ^ntc^fi, Xr-y^S 3 6tcfc 
v^T, a-^WAXlgPl 0 6*fflVTA/jb/c^M-r5 

••t-extjsfjs-rsit- ex i d*, a<§gi59 1 ^/i-b 

T, I C*-K llcmmU MSli, 015©Xx-yy 
S 3 tCittfo 

[oioo] xf-y^s 3 3(cfci/>r, s<ib/c-9--e 
x i dux mc, y-^-r^m-y-exA^snr 

^^^tWSt^nfc^, SiJWl 0 Hi, Xfy^S 
38(Ct3l^T, jiHg|591^bT, ICA-FHCN 
AC Kfi^^iUfBb, X-r>y7 p S 3 9fc*3VT, 016 

oxf7/s 1 6 krattojaffljy*«n, araswrrs 
(r«:t»%» Jaaa, 01 5©xr77s 3fctijt 

[oioi] &tc, 0 i goxn-x^-h^fiSb 

T, 0 1 SOXf'y^S 2tC*JVT, 0 1 8*m^xm 

m Ltc v-#7'(#2 ©tf-ex^giMs t miLxm 
fT«n«, i c a- f i ©it-exiRgM&sfco^Ttt 

^-TSo **5, CCT-li, 03?rffll/^TSi^btc 1 C fs 

- F 1 (cfc^T*&S#fTfensfc©4: bTWWf 

0 4 ^rffli/^TSJH^ b/c I C A- F 1 lc<fc oTSaa*^T 
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So 

[0 10 2] I C*-Kl©!MffllgB3 ltt, Xr'y/S 
5 Ucfci/>T, V—?'7'(*2t>\ HI SOXr-y^S 
3 1 £fc^T3Mf§LfclJ--ex I DS£fi3-7yK^ 1 
fBSI$2 1 £/M,T§{IU X-r«y7*S 5 2(Cte^T, g 

»e#*^i5tT^5-y--ex i D'jxb (-f&t>^> 

^^'J 3 2 CD S R A 4 6 fceitSnT^S+J— £X I D 
©UXh) ££fi!tbT, ilffigfS2 1 *^UT, 

sf$2Kmmtz 0 io 

[0 1 0 3] MffllgB 3 1 «\ Xf-v/S 5 3K*5^T, 
'J-2vf*2tf, 01 8cOXT-y7"S 3 7&b<t4X 
x-yT'S 3 8tCfcl,>T, I C*-F 1 fcjgfflLfcf*-* 
£\ 31^5 2 1 Srtf-LTgflU X-r-yT'S 5 4t£fc^ 

*>. gMLfcr-**<, 01 8CDXf--y7 p S 3 8lC*5^ 
T, 2tf I C ft— Y 1 fciMff Lfzimxti 

, «a**7*ti* Wftfcfc* M4, 01 20 
5©Xf7^S 4tCttitt£vO „ 
[0 1 0 4] 5 4£$<rvc. U-**^2 2 

(f4*J-6, 3Wbfc7*-*#, 01 8cDXx-y 
7S 3 7tCfc^T, "1-^7^*2**1 C *- K 1 KSS 
dLfctf-ex I DT355t§-&) , Xfv^S 5 5(Cfc 
<^T, SIJ8SSI53 114, 'J-^7-r*2*^Sfitfc^- 
£XID(4, g^i#0^^r'J 3 2«S R A 4 6tca® 

[0 10 5] Xr-y^S 5 StCfcl^T, If-ex I Dtf 30 

CTfctoS, fflati, 01 5CDX-r-y7°S 4{Cf4it^^ 
V) c Xr-y^S 5 Sfcfc^T, +>"-ex I DtfBSte 
ftT^3i:«*iSftfcW&. Jaitt, 01 5<DXx-y7° 

5 4 fcJttr. 

[0 10 6] 0 2 0CD7a-^-V-F£#!lL 

t, 07 (a) zm^xmrnLrcmmmmmmzm^T 
vmamifflit>i\zm&. m 1 5 coxr -y 7° s 3 ias 

Ir^TWWfS. 40 

[0 10 7] U-^7-r^2«M8ilg|Sl 0 1 (4, Xr-y 
7S 6 1 tcfc^T, 0 1 5©XT-y^S 1 *5<fctfX-f-y 

wis-rs-9--ex 1 d (lcw, *tfSf3^-ex 1 
»*s-r*Biai 1 d%, ^^'j 1 0 3*'&R*tHu a 

ffig|59 l^LT, ICA-K1CSIU Xx-y7"S 

6 2fCfcl,'>T, &j£-f302 1 ©Xx-y-T'S 73tL< 
«4X7 L -yys 7 5tctei/>T, I C#— K 1 #iM{it'£>-r 

-z^m*,, 50 
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[0 10 8] Xr-y^S 6 3K*5t/>T, MSfSP 1 0 1 
{4, Xr-y^S 6 2fci5^T, I C A- K 1 fr^SdL 

6 3 tCfci^T, A C K{|*f#g{i£ft/c fcf!l»r£*lfc* 
3\ Xfy^S 6 4£fcl^T, $Jfftt 10 1tt> QMfft 
S953 3 ^WSS LT, Xx>y7"S 6 1 fci5V>T\ Bg^ja 

gap i o 2 oitRiftfflaffi 1 1 1 t. 1 < i4±ta&iagsi$ 

1 1 2CD5^ I C*-FlK2!fiLfcBB*I DK» 

«t vmmmwzrmu i c a- f i t-t >y ^ a >m 

Kses£#WU ffiSBEttlA t ISF7U^ *B8tf»7 

[0 1 0 9] Xr-y^S 6 3lCfcV^T. A C Kft^ftfS 
fi^nTI/^l/^^JW^tlfc^ Cf&fc^ NACK 

e#*«^bfci:w»f«tirc»&) . xx-yys6 5tc 

fct^T, 01 6©Xf7^S 1 6i:RI«Offla^*« 

[0 110] <fc(C, 02 lcD7n-^-v-h^r#HSL 
Tx 01 ScDX-r-y^S 4(ctel>T, 02OCO'J-^7 

jzzvmmmmsmmtffiiLTmfiztiz, ic* 
r*t, m3%m^xmwLrc i ca-f ncto, ®a 

[0 111] I C*-KlOWW»3 H4, Xr-y^S 

7 l(c*3i/^T, 0 2 OcoXr-y^S 6 lCfeV^T, U- 
?7-T^ Zff&mLlttffiM I D^, ffi{tg|5 2 1 %ftL 
TSSL, Xf-y^S 7 2tCfcl,^T, Xt7 7"S7 1IC 
feV>T5M3l,fcBiEMl Dttv ^^'J 3 2<D S R A 4 6 

$ nr^ 3 *»s WBf f 3 o 

[0 112] X-r-y7 P S 7 2fCfc(/>T, ISIIil I D*^B 

mttix^itn»ttircm^ www 3 1 «, xr-y 

7 p S7 3{Cfc^T, iifflgP2 l?r^LT, 
2KACKfi^*aSSU Xr-yT'S 7 4(C*5U^T. Bg 

^Maas 3 3 co^Bfia^aas 4itt< t4«ast^asi5 

4 2co5^ 'J-^7i'*2fcffi3£«nfcKiaiK:J:« 
BSEJaa^rUtT U U - * 2 t -tr -y ~> a ygiKses 

fflSBtiEjaiaco^7ft> 5aa*^7^tiSo 

Xr-y^S 7 2fctei/->T, BIE^ I D#B®£ttTV>& 
»^i:ffl*r£*ifc«£, Xf-?7*S 7 5IC*^T, MSUSP 
3 1(4, il{8gI52 V-¥7-<?2l,CNAC 

[0 113] 02O*5<fcl>*02 lfcffl^TSBWLfcffla 
{Cfel^T{4, I CA-F1 tU-^7l'^2t4, 01 5 
cDX-r-y^S 1 *54:t;x-r >y^S 2©5!!ia(c J: tJ^BU^T 
*i/c-9--excD^-k*X I Dtc^tS-T^, U-^9-f* 
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2 tfflg. t rcwmmic * y > ffl5BK*siff -r 

[0 1 14] W*.tf, t*Xfc»LT#SI«*JJ: 
l/17*TO 2a*©BKttWfl«SftT^*«^ «ffl 

»icsc$ < bsemc j; o Kafc»a*fT 3 c t 

t;HkU jaio/^a ytf£^H£tct4, aw 
»CSr3v^TBfiEffla*3te*"r S <fc 5 fc UT t, iv. 
[0 115] 02 2©7D-ft-h?:#IL 

t, 01 5©xf'^s stcfc^mfra-tts, 01 5 

(DXT-yfS 1 fc4tfXTy7"S 2 ©Met 

t, «a®fc«ta*^wa^2a3i<DBaEa^fflSsnT 

HOT So 

[0 116] V—?74Z2<D$m&l 0 Hi, Xf7 
7S 8 l£ftV>T\ ai5©XT77SlfcJ;tfXf7 

:/s 2oM(cit)iigij$nfc^-ifxo'9— ex i d 

FS\ ilflgfl9 1 fctf-LT I C *- K 1 £&{8U Xf 
'V^S 8 2tC*5l/>T, tgarf 302 3<DX7>y7S 9 2 
Kfc^T, 1 C *- F 1 #2&fiLfc£»»/<-5>3 20 
«£, a^SP9 l£/fLTg<lf£o 
[0 1 17] XT7/S 8 3tC:fc^T, (Mfpgp 1 0 1 

«, xt'^s 8 2{cfci/^T§fibrc«aa^—>*3> 

XT7/S 8 3C*5^T, ftiH^-^ay/ffiia 

■pa&st¥ij»rsnfc»&, xfy/s 8 4K£^t, n 

MR 1 0 1 «, I C fc- F 1 fc, £3I8fc:4:5fflSBSE 

SU 1 2*»J»LT, «iI8fc<fc-&*BSBiiE£Fw1&U 
ICa-Flfc-feyfa VgtKses^SW U fflSBEEtf 30 

«nri/fca, jaa««»75n*o 

[0 1 18] Xf7/S 8 3fCfc^T, gilS^-S^a 
y*'W»T?(iai/^f"JWSnfcif£, Xf--y7s 8 5(c 
fct^T. fffl» 1 0 1 14, I C F 1 £, J: 
5fflSBSEISU63vy K*3SSOU ^ffiSSP 10 2© 
^«Jaa^l 1 1»LT, £Bfl*£J:Sffi5R& 
%R!% U 1 Ctj— F 1 t-tr-yi^s y^Kses^«# U 
«SBKff»7Lfc», ffla*«»7Sti5. 

[0 119] 02 3<7)70-^-v-F£#BgL 

T, 01 5©Xr7 7S 4(C|3^T > 02 25:ffi</">Tll{ 40 

w u/fc y - 7 * 2 ©BtEaiiS'JJaa t mnvrmn 
i c *- f i tomMMmmmic-o^Tmrnt 

So £fc, cun, 03*fflV>TltiWbrc I C*-F 

saajb^fT^ti5«^jcov^TiKwrs*v 
mizft^rmwLrc i ca-Fifc^oTiaaaWT 

So 

[0 12 0] 1 C*-F l(D$iJ®gP3 114, Xf7/S 
9 11^1, 02 2«DXx-yyS 8 UCfcV^T, U- 

2 #HS«LfcB>I*/<-i ^*3 >ffffig*3vy 50 
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K*5MIU Xf7^S 9 2£t5l>T, &iI8/S-^a 

[0121] $iJ«3 1 ti, Xf77'S 9 3 Kfc^T, 
02 2CXf7'/S 8 4iL<ttXT7y'S 8 5(C*5V> 

§{1L, Xf77'S 9 4(Ci3V^T, Xf7^S 9 3 £43 
^TS<§£ftfcffiHBSEBI»&3vy K»4, KiNtickS 
ffi5BiIF^nvy FTSSfrgfrfcffllSrTSo 
[0 12 2] Xf77'S 9 4tC*i</'>T, #i§8K4;5ffl 
5BKflBa& a v > F 7?* 5 t fiJWr S ttfeif^, X r -y 7 
S 9 SHHS^T, $ij©g|53 1 (4, Rg*Ht!iagB3 3<D#il 
&©ag|54 2^r$iJfflltT, «a^C<fcSfflSBIiE%^ 

BfE#»7Lfc«, «Ul38«»7SnSo 
[0 12 3] Xf77'S 9 4{<:j3VT, ^ilStfC <fc 3 

fflSBEMtenvvKTfcS) fcWKSftfc*^, Xf 
•y7S 9 6t43^T, $J0ffi3 1 14, Bt^itaSgP 3 3<D 

I»I&dL> - ^7 7 * 2 -fe <y is 3 yaKses^tt* U, 

[0124] 02 2t34a*E2 3*m"xmwLrcmm 

lc<fcO, I C*-K 1 t U-£*-572 2t4, BSE 
T, fflSBSE^fr-rSo 

[0 12 5] 02 2OXf7'/S 8 5*34:t>*02 3©X 

A^fffctlSo l J-^"7-l'^2<0^t l Jl0 3i?)SRA4 
6(Ct4, 02 4 (A) fC^n5U-^57^2©BEW 

s^iati$nTi/>5o i c*-Fi©**y 32 

<DSRA4 6tCt4, 02 4 (B) tC^^tlSIC^-F 
[0 1 2 6] 02 4 (A) *3<kt>*02 4 (B) fC^^n 

s<fc9tc, 7n ; fn<DiEBfl»fc(4, mn9<DA-V3 y 

Wc7;l/3"yXAi:/*7;><-*, BSE^O^hu, 
©S^Wffi, 'J-^77^2, <&SW4 1 CA-FlO 
(ID), y-^57*2<0^BISiKpsp, £5I,H4 
1 C *- F 1 4)£M*KpiK fc<tt>V y -b— >*3>mc, 
0 5 v^Tl«Bfl L it <fc ? ^7nJiM W*/ * -y f ^ MS 

^•>7Xh^MU ^7t-^->*iXh%, BSE 
^©Ig^^Kscatc J: y Bg^{t;-r £> C i: tc 4; -d Tff »R« ti 

[0 12 7]^K, 02 5©7a-^^-h^#S8L 
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«£j#r*«£fco^Ttti5!-r3o ccm ic*- 

K 1 O»J0ffi3 1 tf> &Mttfflatt4 lODS Ag££ 

©Ma&ii&f 5, 

[0 12 8] 1 0 1 tefc^T, $iJSSg|53 1 

to*, p*«», afc£tfb£ffiflE&iS©» +SP3ft 
*§£y 2 = x 3 + a x + b, G*«P3ft«±0^-X#-1' 10 
>K r£G©<6&, M**?-fe-S>» K s *®&ms 

ctsavin s GSftBWk-r*. 

[0 12 9] £MUQatt4 1 OD S AS££/iSc • 
«7 214, Xf7/S 1 0 2^1, 
SfigSP-e, 0<u<rt4§u*«U Xf7^S 1 
0 3Kfc^T> Xf7^S 1 0 2{C}3V>T£fiSteft/i:fL 
Rufcfll^T, fitBlG4u«U V = uG= (Xv, Y 

v) t^sv^fftb-r^c 

[0 13 0] DS AS££j£-ttHffl5 7 2H\ Xr-y/ 
S104fCteV^Tx c=Xvmod r^rStiSU Xf»^ 20 
S 1 0 5tCte^T, S 1 0 4 0fHnjg£KS-3v>T\ c 
= 0Tfe5*W%W»f-r5o Xf7/S 1 0 5{Cfc^ 

t, c = o-e**fcf"j»r«nfc*&» aaaa, 7 
s i o 2(cmd, ztivmvtmffmmztiZo 

[0 1 3 1 ] Xf7^S 1 0 5 {C43^T\ c=0T*«:& 
V^WKSftfcig^ DSAS££fili-ttSE»7 2tt» 
Xf7 7S 1 0 6{C*3VT> *>ytr— ^©/vyS'iffi 
T'^5f=SHA-l (M) (CCT'ti, AT>a«il 
T, SHA-ltfffll/^ftS) fcgtUU X-r-y^S 1 0 7 
fCfe^T, d=[ (f + cKs) /u] mod r^rlWT 30 

So 

[0 13 2] X-f-y:/S 1 0 8K*5^Tx D S A§££ 
5J£ • ^ffiEgP 7 2 ti. XT-yfS 1 0 7 ©fflHSSteStJ 
lr>T, d = 0*>S^?r|iJ»fr5o Xr-y^S 1 0 8fcfc 

i^t. d = oT?**i:tij»fsnftii^, saa«s xt7 

fS 1 0 2tCjp|»3, *n«B©ffl9*'*»)ii*ftS. x 
T7/S 1 0 8fcfc^T* d=0-Z?tt*^fcW»f«tlfc 
Xr-y^S 1 0 9tc*3^T, DSAg££j£-& 

Egi57 2ti, g^x-^^r (c, d) tu ®m&m 
sns. 40 

[0 13 3] COi^lCtTI C*-KltC^TM 

«nfcr5?*;ua**«fibfcy-^-f * 2 a, as 

Lfcr^*;l«**«ttE-r*«ia**Jli-r4. 0 2 6© 
7n-7-*-h*#BBLT, »8ttiE«&afc:o^TlJiW 
t*. CcT'li, ';-^7-f*2 0WW»l 0 1#. & 
BiafflagP 4 1<DDS AS£4fi£ • 7 2 fcMWT 

*-Hitfeif>n, i§]«©j!!ia^sif7^ns©T% 1 

C K 1 ©Mco^TOiBWi^BST 5 0 
[0 1 3 4] Xf77S 1 1 lfc*5V»T, f&JSH&l 0 1 50 
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s££/8»aKis»/<7*-**Birr*. t& 

rftGOffijR, M%*yfe-3>, Ks«iMHi. 
GfccfctfK s G*£?mtT5o 

[0135] 'Amms&m* 1 ©d s km%£.m • mt 

gP72tt, Xf7^S 1 1 2fc*5^T, §#Lfcg^r 
-*©c}3cktfd©ffi£S^T> 0<c<r*O0< 
d < r ■pSSMffrJfeWK-r*. 
[0 13 6] Xf77'S 1 1 2fCfct^T, 0<c < rfr 
oo<d<n?»i*^i:W»f*tife«^, ®I(iXf7 
1 2 0tCjttr 0 Xf7^S 1 1 2£:i3V>T, 0<c 
<rftoO<d<rT&Sfcffl»r*ftfc»&, Xt7^ 
S 1 1 3 fCfcl^T, D S Ag££fiSc • f&SESB 7 2 it. ^ 
•yfe-^M©/vy v-jLfflT**5 f =SHA-1 (M) SrStfJ 
U Xr-y7°S 1 1 4tCfc<^T\ h = 1/d mod r£ 
WJW*. 

[0 13 7] D S Af«M -«EgP7 2tt, X-r-yT" 
S 1 1 4fCfc^TStt£nfch©fit£ffl^T, Xx-y7° 
S 1 1 5 iClS^X. h 1 = f h , h2 = ch mod r £ 
SfflU Xx-yys 1 1 6fC}3^T, P= (Xp, Y 
p) = h 1 G + h 2 K s G%W-ttitZ> 0 

[0 13 8] X-r-y 7°S 1 1 7tC*3t/^T, D S Ag^ 
m-^m^7 2it. X-r-yT'S 1 1 6©fi£tf«S»fr5» 

P©ffltf&^j8jST'&5Jf-g\ 7.r-yfS 1 1 6fC*5l/-> 
T, h 1 G + h 2 K s G<0)B«|5 C i^tt^^il t 
fcS^T, P©ffl*^PBjt^TS5^S*^!pJ»f-r5 
Ct^W^TfeSo Xf--y7*S 1 1 7»C*5V>T\ Ptf& 
K8j&T&SfcWSr£ftfci§£, fflati. Xr7?*S 1 
2 0tcittr o 

[0 13 9] Xxy 7°S 1 1 7fc43V»T\ P©ffi#$8ffi 
iBj6Wifc^fc|yWSnfc«#, XT77"S 1 1 8Kfe 
</>T\ DSAS££fi!c-1$iiEg|5 7 2 it. c=Xp mod 

r 0 4oi»S*>*«|ff ^ o Xf77'S 1 1 8 £ *5 
</>T> c=Xp mod r!b^«33ifcft^tWBr^tlfc« 

^•s ®a«> xf77's i 2 ofcjicyo 

[0 14 0] Xr-y 7°S 1 1 8tCi3l,->T, c =X p mod 
r^figOiOtfiJBr^n/c^ Xr-y^S 1 1 9lc 
*3V^T, DSAS«4fiX-^BEgl5 7 2(i. »gLfc«* 

[0 1 4 1 ] Xx-y7°S 1 1 2(C*5V>T, 0<c<r^ 
O0<d<rT*«iQ:V^WW$nrc«^ XT7-/S1 

1 7icts^Xs pwmfm&x&ztvmztirzm'Bi. 

$>L<lt, Xf77"S 1 1 8{C*5l^T, c=Xp mod 
r*V£9i/cfc^fcW8r£ft/ci§£\ Xf7^S 1 2 0 
Kfe^T, D S Am^fS. • ^KSi?7 2lt. SfiL/cW 

«tiiEL<^i/^*ij»fu jaa*^7$n5o 

[0 14 2] Sfc, 07 (B) ^rfflV^TSiWLfc^SEffl 
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[0 14 3] #(C, 02 7<D70-f--\'-F£#jIL 
T« 01 5<DXf y/S 3 (Cfc^TUff £ft5, SS^ 
- k'X(Ctt t T U^;i^tt* nfc«»oKIE»«<tttt« 

TUJ^T^o 10 
[0 14 4] >J-^7-Y*2 0iW»Wl 0 Hi, Xf-y 
/S 1 3 HCfct^T, iifggP9 l^ftbT, 

*37yF^ I CA— KifcSHEU xf'^sn 

2(C:fc^T, |£iTf302 8<DXf77S 1 4 3{C*5V> 
Tv I C f}— F 1 U"WNfcfcW-*«/<- 

[0 14 5] Xf'^S 1 3 StCfcVT, faj»g|5 1 0 1 
Xf -y/S 1 3 2(c4oV^TSfitfc®>' J 5-v ? 3ytl 
mvoi/'WNtt, N>o-e*Sft^*W»r'r*. X 

1 3 3(Ci3V">T, N>0T'«fcl/->i:W»r£ft7c: 20 
«£, WXf7^S 1 3 7fCitty 0 
[0 1 4 6] Xf-y/S 1 3 3(C*5<^T, N>0tfe3 

xt7/s 1 3 4K*5^Ts mm® 

1 0 Ki, XT7/S 1 3 2tCfc^T§{tbfci|A-v ; 

T7/S 1 3 »SP 1 0 Hi, ffl<gg|59 1 30 

*fl-LT, I C*-FlfcNACKe^*3aSSU »a 
(iXf y/S 1 3 2fcM*), *nJU»0«Hl)b^i!)fi« 

[0 1 4 8] XT7^S 1 3 4 tC*5VT. U"01/N(C*5 
ttSftrt-^a fcWKStlfciB^ Xf 

•y/S 1 3 6(Cfc<,>T, ffcUflSgB 1 0 1(4, jiffg|5 9 1 * 

:*>lt, i c*-k lKACKfli^jSSfflu saatfi* 

[0 1 4 9] Xf-y/S 1 3 3(C}3^T, N>0Tii4 
^fcWWSnfcW^ Xf-y^S 1 3 7Kfc^T, 0 1 40 
6<DXf -y/S 1 6fcH«<Offla*'*StU AHijWKT 

[0 15 0]&fc, @2 8©7D-ft-h^#il 

S'iJastMtTtT^f^ns, i c ts— f 1 tossan 

»JfflatCOt^TKWr«. CclT'k, 03£ffl^ 

TKflBLfc I C*- F 1 (ciD, Jaa***fr4n*«^ 
tov^RWtitf. H4*flH#*TBHELfc I C*-F 

raaojaaib^^ns. 50 
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[0 15 1] I C*-Kl©9JflP»3 ltt, Xf-y/S 
1 4 ltfe^T, 02 7<DXf -y/S 1 3 1 (Cfcl/^T, 
U - ^5 -T * 2 L fcH U^;l/$i$3 v y F*£ffi 
U Xf -y/S 1 4 2(C*5(,>T, ^ft<D8U<"<;l/N?\ 
N= 1 (c-fe-y F"f 3„ 

[0 15 2] IHflP&3 1«, X-f -y7"S 1 4 3(Cfc^ 
T, gifficDai^UNt, *-<Dl^Ol/(c:j3(}£>g&K-i/ 
ayflHBV*, ffi{8Sl52 lSr/l-LT, 'J-£7f*2(c 
Xf -y^S 1 4 4(£:fc^T, 02 7CXT7 7' 
S 1 3 5tL<«Xf -y/S 1 3 6C^T. V—?? 
7* 2#>MfgL/cf--2%gfI-f So 
[0 15 3] Xf-^y/S 1 4 5(C*5l^T, flPjapgff3 1 
Xf77 p S 1 4 4(Ci3^T, "J— ^7^*2*^5.8 

f -y/S 1 4 5(Ci5i/>T, l J-^^2*^fiL/c 
SfttAC KmT(i&^iffl»rSnfd§£, »SI$3 
1 «, X-f-y 7"S 1 4 6{Cfct/>T> N = N + l!:U X 
f -y/S 1 4 7(CfcV^T, 

[0 15 4] Xf-y/S 1 4 7(Cfcl/>T, Ntfg^l^ 

;i/*jffl*Tt^v^wKsnfc*^ saa(ixf--y^s 

1 4 3 (CRD, *fttt»©*as#»»)igsn*. Xf7 
:/S 1 4 7 (cfeVT, N#«*U^/l/£ig;tT^3i:W 
WSftfcJf^ Xf 7^S 1 4 »g|3 3 1 

ti, SfiEO^yi/*N = o (N = o»i, flMttftg^-f 
fcOfcfS) t U ®S(iXf--y^S 1 4 3(CR9, * 

[0 15 5] X-f-y/S 1 4 5(£4o^T, U-$f7-<* 
2ft»5SfcLfc©#ttA C K<l*tT'£3fc*"JiST£nfci§ 

[0 1 5 6] 01 57ii202 8£ffl<^T, ICA-Fl 

B8f«ft3IfcOl/^TKWUfc««, fi«JA(f, 02^rfflV^T 
IKiLW-t:XlIffly-y'7'f^2-l lt, IC 

*- F 1 *S*U «rfcft-*-t^©5SMi*^T^S* 
^, fcJ;0 : -9--b*X(Dffl^MT-r?.Ji^(ca, 01 0 

2-1 l^t'Jl 0 3(cfEtSSftTi^£>+>— k'xeS 
ffl<Dgffi»Kreg«:ffll/>TSSE8aa*fi : orc«>, 01 57i 
S0 2 8 «rfflv>TSiW bfc<t 9 ftfflHffiffijaa^ffl^* 

[0 15 7] ^(C, 02 9«7a-^^-F?r#HgL 

t, •9--exgsfflu-^i'^2- 1 KD-9— trxa 
sfflatcov-TiKB^-r^o 

[0 15 8] ^-exegffl'J-^^^2 - 1 KDffl 
SUSP 1 0 1 (i, Xf-y/S 1 5 1 (Ct5t/^T, afflgfl9 1 
^Lt, ^-exlinvyK?:, I C ii— F 1 (CjM 
<IL, Xf-'y/S 1 5 2(cfci/^T, IC*-Fli:, +>- 
-exggffl^Kreg(cJ:5ffl5^aE^ffi\ -b-y->3 > 
SKses?r««-r5 0 
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[0 15 9] frJSfgm 0 1 tt, Xr-y 7*S 1 5 3iCl3^ 
T, ^SMWWttttnvvFfc, iI<Bffi9 l^/TLTI C 
*- F 1 tCiUflU, Xf7yS154 fCfcl^T, »5E-r 
303 0<DXT-y7S 1 7 5 t b< tiXf v 7* S 1 7 6 

tcts^x i c#-f 1 3^5as©*ti«7 j -^*sfi-r 

So 

[0 16 0] Xf7/S 1 5 5(Cfcl/>T, ftfJaSfl 1 0 1 
ti, X7-V7S 1 5 4Kfc^T, I C*-Klft»5»I 
LkSmtA C Kffll^T**M»»*W>W*. Xf7 

7S 1 5 5tC*5^T, I C i3— F 1 frbgrnLrcfmi* 10 

A C Kfl^TfcS fc««Sftfc«£, Sffllffi 1 0 1 «, 
Xr-y^S 1 5 6Kfc^T, Hg^MHSfl 1 0 2©«ii^ 
ffiSSP 1 1 2 I C *- F 1 (0**9 3 2 IC 

SrfcKSSrsaSr-**, -by *3 >8KsesT*l£*i 
<tZ&, 1 5 7£}3^T, Hg^ftx-*^ 

mims i^ut, i c a- ki teasers. 

[0 16 1] Mffllgpi 0 1 tt, Xf7?*S 1 5 8tCfc^ 
T, tiiE-T503 OOXr'y^S 1 8 OfCfc^T, IC 

fcftLTgfiU X-r-y7S 1 5 9fc*5l^T, -9-fcTX 20 
ISIiEtc J: 5-9— If XBUI&ff nj7 5 7"££{§ U iE-WW 
7£ftS 0 

[0 1 6 2] Xt7 7"S 1 5 5 £fc^T, IC*— Fl 
fr£Sfil7dl*§tfA C K©#?ttft^i:*U»rSftfc* 
£, Xx-y7S 1 6 0lCfc^T, 01 6tf)Xr7^S 1 

[0 16 3] &{C, 03OO7a-ft- N%#IL 

722-1 io*-exas«iai:MfTUT*fT«n 
s, ic*-kio-9— vjxeayaatco^TKwr 30 

§0 

[0 1 6 4] Xr-y/S 1 7 1 (Cfet/>T, ICA-F1 
W$ijffllgl5 3 1«, il<lg?2 l£:J"rLT, 0 2 9<DX-r-y 
7S 1 5 ltCfc^T, +J--fcTXggffl 9-2^72 2- 
1 ltfiMfiLfc-9-- tTxeg3-7VF%Sfif5o 
[0 1 6 5] »JS?gP3 Hi, Xtv^S 1 7 2»C*5V 40 

t> i c *— Kit, t)"— b* xmmmmregic z stag 

7 SfCfcl^T, afflgi5 2 l£7fLT, 0 2 9<9Xf--y:/ 
S 1 5 3fCfc^T, •9--exS^ffl'J-^'f * 2- 1 

[0 16 6] Xx-y7S 1 7 4 tCfc^T, ^)©gi53 1 
«, **9 3 2<9SRA4 6fC, ISf-^lO^^I 
«tf**frga»StfU»f?*. Xf77S 1 7 4£&tr' 
T, 3S*fS«W^i:WSr*ftfc«^ XT7/S 1 7 

5K*5l^T, SJffliai53 ltt, +>— b'Xlgffl'J-^-f 50 
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^2-1 HC, 1111352 1 NACKf^ 

fit, iastf«7*ft* 0 

[0 16 7] Xr<y7S 1 7 4tCte^T, 3eflWtf& 

5 fc*J»rSft:te«£, Xr-y/S 1 7 6tcfc^T, ©JSP 

gi53 la, -9— exeswu-^77^2- 1 nc, m 

{ISP2 lfcftLT, A C Kfg^atfi-rSo 

[0 16 8] »g|53 1 fi, Xf77*S 1 7 7tCfc^ 
T, 02 9<DX-r-y7S 1 5 7£*51>T, ^-IfXSS 
ffl'J -^^2-1 l^iMffibfcllg^ftr-^*, 3 
m%2 lSTrLTSffiU Xr-y^S 1 7 8fc43V>T, 

Hg^5asgP3 3©«agiS!ia^4 2*imlt, xt7 

7S 1 7 7tc*5i/^T§{8b/cBg^fbT f -^^, -b'y>a 

[0 16 9] Xf77'S 1 7 9fC*5^T, fRMK3 1 
»±, X7-y7S 1 7 8lCfc^T, -try ~>a ^8ttses»c«t 
5««tlfcf-#%. **9 3 2tC{tt*SU SRA4 

6 ©Service Individual Info^&fc^tf S R T 4 5 tC 

[0 17 0] ffiijffllgi5 3 1 tt, Xf77"S 1 8 OlCfeV 
T, f-^«li^75;, m\%U2 lfcfl-LT, "9— e 

xa«ffly-^57*2-i ltmu xf77s i 

8 1 KfcVT, 0 2 9 0Xf77*S 1 5 9(CfcV^T, V 

-exs^fflu-^7^2- 1 l^iMfiu/c, -9— e 
x|giEfc<t?.^-trxii»pj77y5:S{8L, -9--e 

XSiJBfcffr^^fc, **9 32<DSRA4 6©Servic 
e Individual InfoS#fCi8J£U J!ia^73nSo 
[0 17 1] ^(C, 03 1 070-ft- F^r#P.^L 
T, tf- trxggUB >J -^57^2-1 KD-9-kTXiJ 

[0 17 2] Xf77S 1 9 1 fcfc^T, "9— IfxaS 

ffl 9-^57 ^2-ii i o ni, a— 9**v 

XTjgPl 0 6*ffl^TA7Jbfc, fflBrrs^-extJt 

fS-rs-9-- ex i DoA.a*£**5 (ccm jtjg-r 

fx I Dtf, I D_ST?ft5U— e^giji»sn 

[0 17 3] Xf77"S 1 9 2(C*3V^T, 02 9«Xr 
77S152 fcBttOffl.938<a:S*l5o fWMB 1 0 1 
«, Xf77S 1 9 3tCfe^T, jiftg|59 l^LT, 
I C*-K 1 I D.SWWfflHtnwKJfeaMIU 
Xf7 7S 1 9 4fCfc(,^T, ^-T§03 2<DX-r-y7' 
S 2 0 5(C^3^ / ^T I C*-F 1 tfjjfflLfc, X^-^-y 

[0 17 4] XT7/S 1 9 4(C*5V^T, X7-^7t 
-i/ZgSLfctfiMZftrcmS. XT7 7S 1 9 5fC 
*5^T, 0 1 60XT77S 1 6t(l*S05!ia^$ 
ft, J2!atf*l7£ft£o Xf77Sl 9 4»c*5VT, x 
=7- * -y -b- L a 7c WW S ft 7c^, «!, 

a^7?ft§ 0 

[0 17 5] ^IC, 03 207n-^^-h^r#Bgb 
T, 03 lfcffi^TiBHIJLfc, -9--exggSfflU-^ 
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3, i c a— f i <w-e*»jB*fflgfco^TWiB-r 

5 0 cCtt, H3*ffl^TgfiWLfcI CA-F 
0 4 fcfflvvtKWLfc I C A- F 1 KAoTft!^ 

So 

[0 17 6] Xr-yT'S 2 0 1 fcfe^T, 03 0©Xf- 

1 7 2 fcn^ttatfjtfrstis. i c a-f i 

(D$iJSig|53 Hi, Xf'^S 2 0 2fC*3^T, 03 1© 10 

xt-v/s 1 9 3(c*5i,^T, -9— exasffly-^-f 

*2-l ltf&fSL/c, IDJWil37yR§ 
fib, Xf7 7"S 2 0 3tCfc^T, I D_S««K:*tJ& 

T7^S 2 0 2K*^TSiU I D_Sffl«9JKt3V 
y FOiESttft'ttSE^tife^g^ipJK-r 
[0 1 7 7] Xt'^S 2 0 3fcfcV»T, I D_S tSl§lc 
EPJft 3 v y F ©IE a tt #8ME S txfc fc WNf * ft fci§£, 
Xfv7S 2 0 4K*5V>T, $"JffllgP3 Hi, ^^^3 2 
CDSRT4 5fcJ;tfSRA4 6frP>, I D.StCftjST 20 

[0 1 7 8] 2 0 3{C43I/->T, I D_Sf|fcS 

mffi^yY<om%m>mM.zwzfr^rctmmznrc 

Xr-y7S 2 0 5fC*5l,->T, 1 «, ill! 

[0 17 9] 03 l*5itf03 2*fflWtBHBbfc1*-- 

exfflKfjaaa, -figy-^7^*2- 1 2£ 1 ca- 

F 1 feUff-r^CtfeD^lT-SS. 03 3<D7n-f- 
4r-h*#8ILT. HRU-^-Y* 2-1 2C-9— If 30 

[0 18 0] Xr-y7S 2 1 1 Kfe^T, 016, tt 
<&01 8£ffl<^Tl&H,8L/c, 'J-^7-r*20-9— e 
XSW?JSQa*^ff*n, X-r-y7S 2 1 2tm, 0 

20,022, t>L<am27 zm^xmrnLrcv-? 

3tC*5t^T, 03 lcoXx-y^S 1 9 3 i: m&<D!8}mW 

[0 18 1] Xf7 7*S 2 1 4K33VT, — f&'J-^v 
-Y*2- 1 2£0»gl5l 0 Hi, tat503 4<DXf 40 
-yT'S 2 2 7 tL<aXf77*S 2 2 8fCiS^T, IC 

S 2 1 5fcJ:tfXf7 7 , S 2 1 6tCfcV>T, 0 1 6<DX 

f77's 1 5*5<kt/xf--v:/s i 6i:H«©»8#ssfT 
sft, saa* , »7sn*. 

[0 18 2]^tC, 03 4<D7a-^+-h^#BS,L 
T, H3 3*flJ^T8»P!Lfc, -a§'J-^7^^2-l 

T'fc, H3*ffl^TWWtfc I CA-F HC<fc»3, SJia 50 
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wnnztizm'&ic-D^Tmmtztf. 0 4 *ja^T»i 

il/ft I CA-F 1 fc*oT«yift^*ffSn*«^fc43 
[0 18 3] Xx-yT'S 2 2 1 iCfcVT, 017, fet 

<«0i 9*m^xmmLtz. i cA-Fi©+»--trx 

WBJfflStf^fTStU Xr-y7"S 2 3 2fC*3VT, ^2 
1, 02 3, feL<fi02 8*Jfll^TKiP!Lfc I CA- 

f i ommmmsmmffnft <*ft5<> 

[0 1 8 4] Xf'^S 2 2 M®gP3 1 

«, 03 3C7T7/S 2 1 3fc*5<^T, — 
* 2 - l 2 &mm Lfc, 1 D_ S tSJgS^J^n V V F 
j1{8SI52 l^UTSfi-fSo Xr-y7'S 2 2 4tC 
fc^T, 03 2©Xf77*S 2 0 3 t ratt©ffl8#3fefT 

[0 18 5] Xf->y7S 2 2 4fC*5^T, nvyFOIE 

^tt*^EE$n**^/ctw»f?nfc^, saaa, x 

T7^S 2 2 8(Cjttr 0 Xf77'S 2 2 4tC*5l/>T, 3 
vyF©EM^tf&Hl£ft/cfcfJ®r£ft/ci§-&, Xx-y 
7°S 2 2 5{Cfc^T, Hi, ^^'J3 2<DSR 

A4 6£DService Individual InfofWSc, V-\£XM 

[0186]Xxy7S22 5tCfeV>T, V— tfXHiJRS? 

ttio^tf^snT^fti/^wKSftfc*^ $aa 

li, X-r-y7S 2 2 8(CjItyo X-r-yT'S 2 2 5fC*5t^ 
T, If-ex^IW^ytf^SftTV^ fcWBrS 
ft/ci§-&, Xx-yT'S 2 2 6fC*5^T, 03 2<OXr>y 

7s 2 o 4 tra«©jaa6^a«n, xf--y7s 2 2 7ic 
few, »gP3 la, a<§^2 i^lt, -mv- 

[0 18 7] Xy-'j-fS 2 2 4{i:fc^^T, 

Xf7/S 2 2 5fC*Jt/->T, ■9--tTXBiJ^¥FPl77^ 
aa^?nTI/^t->i:WBf?tlfeW#, Xf--y7S22 8 
^i:^^^T, Hi, jifflSP2 l^LT, -»U 

-^5-r^2-l 2(CNACKfl#%jM{ft, jaa*^ 

7?ns 0 

[0 18 8] 03 5tD7D-^^-F?:#B§b 

T, n-W -»y-^7-f*2-l 2T\ I CA- 
F 1 fcBSSttT^3-*-l£X***'5«£te*ff£il 
5, -»y-^7^#2-l 2©-9"-k*X^t#fflatCO 

[0 18 9] X-f y7S 2 3 1 KfcVT, 016, tL 

X^giJSaa^HfT^tl, XT7/S 2 3 2£*51,>T, 0 
2 0, 02 2, tt<«02 7^ffll/^TSJ^tfcy-^ 

[0 19 0] Xf7/S 2 3 3fCfcU>T, -»y-^7 
^^2-1 2 cOfflSlgl? 1 0 ltt, aff8159 l^LT, 
ICA-FHC I D_SfS«cDr-^S*3WF% 
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[0 19 1] MflMil 0 1 tt, X9-yfS 2 3 4tC*3V> 
T\ f£irf503 6<DXT«y:/S 2 4 5fc:*i^-T\ IC 
ti- F 1 ^fl^ftS-r-^gfiU X-rvfS 2 

3 5(cfc-^r, Hg^saggp i o 2 o&astsaggu 1 1 2 

£frJfflLT, Xt7 7*S 2 3 4 &Ci5^T§fiL/cBg*f{t 
■r-2£, ^yi/3>f8Kses£ffl^T**|£-e3 0 MS) 
g|Sl 0 Hi, ffi^nfcx-^ffll^T, 0IJ*Ji\ 

m-hmji£t\%o io 

[0 19 2] #tC, 03 6CD70-^-h£#f$L 
T> 03 5£ffl(,>TgHH£Lfc, -flS'J-^7^2- 1 

2©+»--exx-^^#i!iai:M?ftT^T^n§, i 

3„ CclT-t> 03£fflt^TSJB3L/c I C A- K 

mtttm^xmwLrz i cA-FuaoTii^ 

So 

[0 1 9 3] Xr-y "^S 2 4 HCfcl^T, 01 7, <E>L 20 

<&0 i 9^m^rmmhrc, i c*-Fi<D^-ex 
nsysaatfUfT^n, xf--y:/s 23 2{cfc^T, 02 

1,02 3, &L<li02 8*m^Tfflfflbrc I C#- 

f 1 <Dmmmm^mmt>mm^ 0 

[0 1 9 4] Xf'^S 2 4 3K£>^T, IC*— Kl 
<D$i|fflia53 Hi, iiflg|52 l^LT, 03 5©Xf'y 
7°S 2 3 3££^-C, -^U-^f'^2-1 2tfjM{| 

»g|?3 1 (i, X-r-y7"S 2 4 4(Cfc^T, Bf^agfl 

3 3 tfD^iiiiMSpfl 4 2 %M'&L~Cs ?<tV3 20 1 D 30 

y»KsesS:ffl^TBi*§{fc;£-t3\ 2 4 5fC*5^ 

**7722-l 2tC&{§U 5!li^7?n5„ 
[0 19 5] ift. I CA-K1 il-lSU-^-1'^2 
-1 2(Cfcl^T, ^S^-ex^Mf 3ffi$8<Dg§#& 
^ftTV^il^iCio^Tk, 08£ffl^TiaWLfcS R 
T4 5fc, ^T3^-$y^ 3 yt»fStffe^£ftT^ 

fcWrSW&dSS^T? C t*^T^So 03 7 O 40 
7D-^-V-h£#BBLT, I D.SWy^+f-ex I 

d (c jtis-r 5 -9-- ex£>^T#{ctrbfts, -is 'J - 
2 - 1 2(D-v-\£x?--5tmm&mi l c'o^Tmw 

[0 19 6] Xx-yys 2 5 lT^UXx-y^S 2 5 4 IC 
431, ->T, 03 5<OXx yys 2 3 1 TiSX-r-y 2 3 

4 tlBjScDMa^T^n^o Xx-y:/S 2 5 5lCtS^ 
T> -§gU-^7-<^2- 1 2 <D*Jg?gP 1 0 1 fi, Xf 
7/S 2 5 4(C:fc^T, I C#— K 1 ^SfitL/c-r- 
^fi, NACKffi^frSfrfcfJSTtS,, 50 
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[0 19 7] Xy-VfS 2 5 5tCi3^T, gML/cr- 
N A C K«^T«%V^W»f^n/c^ Xf77" 
S 2 5 6£:f3^T, 03 507f7 7'S 2 3 5 tmm<D 

^mtfrnft-zti. mmmiztxZo xx-y^s255 
^n/c^, 01 6oxx-yys 1 6tmm<Dmmt>^ 

[0 19 8] 0 3 8(D7a-^ + -h?r#Bgt 

-c, 03 7*m^TmwLrc. 1 

20-9-- eXr-^f&atMfTLTHtTSti^ I 
C 7J— K 1 <Dy-¥XT-$%Lm®MlC-O^Tmffl? 

i.o cciTt, m3*m^TmwLrc i c#-f 

0 4 £ffl^Tf&0.SL/c I C il— F 1 tioTMa^ff 

So 

[0 19 9] Xr-'y^S 2 6 lT^MXr-y^S 2 6 3K 
fcV^T, 03 4<DXT>y/S 2 4 lTiMXT-y/S 2 4 

3 tl^OMatfUfT^ftSo X-r-y^S 2 6 1 
T*Si, "9-ex I D_S tim%%, -9"- ex I D_TO 
I£EtffTfc>ft3fc<D£-f 5 0 Xx-y7°S 2 6 4fCfcV> 
T, I C*-F 1 ©$IJSSS|53 Hi, 3 2«DS RT 

4 5teitfSRA4 6K, Xr'y/'S 26 3ttVT§ 

{IL/cx-^g^nvyFfcttJStS I D.Slitffi 
g^nTV^frgfrSrWrrSo Xx>y7s 2 6 4£33 

Mi, X-r-yT'S 2 6 9(citty 0 
[0 2 0 0] X-r-y^S 2 6 4tC*5VT, I D_Sffi$ 

r7^S 2 6 5(CfeV^T, 3 2©S R T 4 50, 

I D_ S tc ttfct % /<- = -y > a yflMH 7 f - ;b Ffr 
P>, I D_S«/^- = -yS/3>1f!S^^#L, Xf7 7" 

5 2 6 6£t5^T, I D.T^IEBtt, I D.S<Df-? 

SRT4 5<DI D_SlC#j£-f 3^-5 'y^3;/1i 
«7f-^F(C, I D.TfCi^KliEBttc, r-^OS! 

^tobi^, -r*t>^, r otixtir w^tBK^nr 

V^*>S*^W»r-r5) 0 Xr-y/S 2 6 6K*5^T, 

jaaiiX-r-y^S 2 6 9tCjtCf 0 
[0201] Xx-y^S 2 6 6tCi3l^T, "r-fKDWih- 

6 Hd&TSXTVZfS 2 6 8£*5<^T, 

7S 2 4 4*3«ttfXr-y7 s S 2 4 5 h |3|«<Offia^lltT 

^n, $Qa#*!7£n5 0 

[0 20 2] Xf-y^S 2 6 4JC43t>T, I D_S®S2 

t>mmtiT^%;^tnmztircm-&. tu<ti, xf 

•yT'S 2 6 6lC:fc^T, 7-Z<DW&>)hfrhm*lZtyT 
^%^tmWtZt\rct%£. Xf77"S 2 6 9£*5^T, 
*Jffl)gi53 Hi, ll<ia52 l^LT, -|S , J-^7'l'^ 
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2-1 2^N a c KimzmsL, jagtf»7s*is. 

[0 2 0 3] 03 571iSH4 8*ffl^TRWl/fcU— If 
Xr-^flHW&afcAoT* I C*-F 1*»6-»U- 

T, ICA-Fl<D^ : &U32<DSRT45fet<ttS 
R A 4 60nf£OflWiCttLT, T-**»*i&trt!ig 

[0 2 0 4] JfctC, 0 3 9£D7a-f-Y-h£#5$L 
[0 2 0 5] X-r-y/S 2 8 1 tCfc^T, 016, t> L 

2 0, 02 2, feb<ttBI2 7*fflV^TllW!Lfey-^ 

[0 2 0 6] -iRU-^-Y^ 2-1 2«D$iJ»gPl 0 1 
it, Xx-y^S 2 8 3lCi3^X. IC*-FlO^*y 

3 2t»tatrfc«>ic, I C#— F l KiMfitSx-* 

*, Bg^MSgP 1 0 2 <DKMM&m® 1 1 2 *»]»L 20 

2 8 4 fCfc^T, I C*-FlfC, f f -#§f?i&#:3V 
VFfc, Xf'^S 2 8 4{C*5^TBt^{L;LrcT f -2 
51fflg|59 lfcfl-LTiMMU jflaaWKTSti*. 
[0 2 0 7] 3WC, i4 0O7D-ft-h^iL 
T, 03 9£ffl^Tl8B,Sbfc, -fty-^W#2-l 

5, I c*-Flo-9— exr-**t&#J&Sfc:o^ 
Tl^fSc fc*5, CCT-&, 03£ffll^Tl&B£Lfc I 

c *-k i tj; mmffmnztizm-sric-D^-zmffl 30 

[0 2 0 8] Xr-y7°S 2 9 1 tCfct^T, 017, &b 
<«01 9tffl^TBWl/ft, I C*-F 10-9"-ex 

mmmtfimmti, xxy/s 2 3 2t;:*5^-c, 02 

1,02 3, fcb<ti0 2 8%ffl^TW$Lfc I C# — 

f 1 ommmmftmmtfmfi snso 

[0 2 0 9] Xf-V^S 2 9 3fC*5V>T, ffrjffllgl$3 1 
tt, a{tSI52 1 SrftbT, 03 SOXf'^S 2 8 4 £ 40 
fc^T, HRy-^-r*2-l 2#2HIbfc, 7 s -* 
ftii*3?yKt^(tf-^5;§lt§. MOW 3 

1«, Xx-y^S 2 9 4{C*5V>T, B^ffiaS$3 3<D« 
ffl««ia»4 2*a»bT, gfIb/cir-2£, -b-y-> 

a^SKses^ffl^TS^IS-e, Xr7 7S 2 9 5 fCfcV 
T, ^t'J 3 20SRT4 5*5<fctf 

SRA460I D.StWiSf 5*- fcTX««««'\» 

[0 2 10] £fc, I C*-F i iHiy-^>2 
-!2tct3^T, <fc£+^fc*xtcH-f £lff8<9i§§tf& 50 
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T4 5tc, ^js-rs/^-s-yi/ayit^K^nT^ 
sw^, 03 7*i«fctf03 szm^xmwLrc^-zx 
T-zmmmtmrnic, m&m^on^ms^tix^ 

£llfrf3Cfc#We&3o 04 !CD7P-^^-h 

£#eslt, i D_sixno-y--fc*x i Dt^jsfs-y- 
-exoHfTffcfffens, -fisy-^*5-r^2-i 2 
©■9— exx-^stii^Mafcov^Tttiwrso 

[0 2 1 1 ] X-r-y7S 3 0 1 TiaSXr-y 7°S 3 04IC 
fet^T, 03 9©Xf7^S 2 8 1 MXT7 7°S 2 8 
4fcWtt©»iatf<!lfT?n5. ^bT, Xx-y:/S3 0 
5*5<feti : Xx-y^'S 3 0 6(CfcV^T, 016<DXx-y7 p 
S l 5*5«fctfx-r<y7*S 1 6 fcH«©«yitf*Sft> ft 

a*^7?ti5o 

[0 2 12] &{C, 04 2£>7n-^-F£#s$L 
T, 04 lM^TlffiLft, -jjSy-^7^^2- 1 
2 0-9-- tXr-^StjX^a^MffbTHfT^n 
3, I C*- F 1 ©■9--eXr-*»*&#fflaKOV'» 

c *- f i c<t o, j&aff&fr ?ti5«^Koi/>Tiiiw 

[0 2 13] Xf'yys 3 l lTi^Xr-y^S 3 1 3ic 
fct^T, 04 O^Xx-y^S 2 9 1 ASXT77S 2 9 

3fcratt©ffiaaWr£n5o xf77*s3 1 1 

T-ti, -t-trx I D_S tim%%, -9--HX I D_TO 
WWi v ttt>tl%*><D£-t%>o Xf-y 7"S 3 1 4*5«ttfX 
■ry^S 3 1 5£fct^T, 03 8©Xf7^S 2 6 4*5 
itfXT7 7*S 2 6 5 fcR«©jaatfft*n, X-r-y^ 

s 3 1 4fcfe«/^T, i d_s tix^^t 
mmstitzm^ fta&, x-r-y7 p s 3 2 0{c3tcy o 

[0 2 14] X-r-y-/S 3 1 6(C*3V^T, WSP3 1 
tt, I D.TfggEBSK, ID.SOt-fXtCjbfLT, f 

%t>%. SRT4 5(DI D_StCW(£-r^/^-5-yS/3 
>1f«7-f-;I/FK, I D_T|g|IBtcD-r-^0»tjA 

f5) o Xx>yyS3 1 6£*SV>T\ T-Z<Dm%&fr 

tm^nx^r^tmm^^rc^. Ma«xr-y^ 

S 3 2 OfCjttfc 

[0 2 15] Xr-y^S 3 1 6fc:fc^T, 

&fri)m*iznx\,->ztmm2tircM&. xf-vys3 

1 7 fcitfX-r-y^S 3 1 8tC43t,>T, 04 0flXf7 

2 9 4 fcitfxT7 y s 295 1 pfii ©*aa*»*tf 

tn§ 0 Xr-yyS3 1 9{cfet/^T, »gi53 Hi, a 
MSP 2 l5:/rLT, HRy-^7^^2-1 21CACK 

[0 2 1 6] X-f-y^S 3 1 4(Ct5l/^T, I D.SiS? 
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vn^t*mntiitm&* xf7^s 3 2 otcfc^T, 

2-1 2fcNACKfi9£ii$fl3U »ltfK7S*l8. 
[0 2 17] M±WJ!UfcJ:3fc, -fty-*9-r*2 

-i2Il, i ca-f 1 *«*u fta-9--trx*stt 
/^-^3y7«yy$n3 crabs, a^i^ti 

2-1 2K. IC*-K1**9U B4 375M04 7 

«rffl vvcftsw ssi^-^3 y7^^mm^mnt£^ z 

y OffiiE»»<: 3 V7 -y 7r S «fc 5 £ L£ ttfttf 4 
[0 2 18] 04 3*#BgLT, -t-tfXftlil/S 20 

»6nft/<-y3y77^ffli (H6feJ:tfHi 4£ffl 
^xmWLtz^-i/a yZ-yyfflSlKake.vup) Srffll^T 
SfcfTSftS, M->"3>777"ffl'J-^^2-l 4 

[0 2 19] Xf7^S 3 3 1 Kfc^T, 0 16, fcb 
<«01 8£ffl^Tl8BflLfc, 'J-#7-f*2©-0—l£ 
X«9J«raW*fl«tU Xf7 7"S 3 3 2(C«V>T. 0 
20, 02 2, «,U<fiH2 7%ffl^TSiWUfc>J-^ 

[0 2 2 0] XfyT'S 3 3 3»C*5Vt\ /^'a>7 30 
V/mV-tt'f* 2 - 1 4 ©»gi5 1 0 1 14, Bf^SQ 

asm o 2 ©wiiajaagpi 1 2*sjsilt, ^--^a 

a >8tKses5&ffl^TB&^{fc?-e\ I C A- F 1 icmmt 
So XT>y7S 3 3 4fC}3^T, 1 0 1(4, 

tS04 40Xx v7S 3 5 5 t< «Xf V/S 3 6 

otcfc^T, i c a— k i ^ana-rsfi^sers. 

[0 2 2 1 ] Xr--y7S 3 3 5tc43</>T, ©JWgP 1 0 1 
Xr-y7S 3 3 4fcfcl^T 1 CA-F 1 fr«5>§f§L 

S 3 3 5fCfc(/>T, Sfflbftfi^A C KM^T'ttfc^ 

fcW«2nfc«£, iaaa, xr-yys 3 3 9(ciitfo 

X-r-y/S 3 3 5{CfcV>T, SlLfcI§tfACKf^ 
■e»*i:W»fSn/£«^, X7-y7S 3 3 6(C*5^T, 

tiWtft^-^ayHmt. BSOttaME^ty 1 0 3 

frbmkmu 1 o 2«±taasaagi5i 1 2 

fcSJfflLT, *-y->3y»tses*ffl^TBg^{tStf, il 

(igp9i^tT, i ca-f ncji{rrs„ 

[0 2 2 2] ^LT, Xr-y7S 3 3 7 tCfc^T, IC 50 
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A-Fltf, marS 4 4©Xr-y7S 3 5 9tb<« 
Xr-yT'S 3 6 0Kfc*^TjMMLfefi^SMr5o X 
■r-y^S 3 3 8fc*5V*T, Xr-y 7 S 3 3 5 tm&HDia 
ltf4?n, X-r-y/S 3 3 8K6^T. SffiLfcfi^ 

#a c KQq-v&stmmztittmG* mmtmrzti 

S„ X7-y7S 3 3 5fc«ktfX7 L -y7 B S 3 3 8tCfc<^ 
£\ Xf-y^S 3 3 9tC;fc^T, 12 1 6<DX-r-y7S 1 
[0 2 2 3] 0 4 4CD7D-?-*-F£#^L 

t, 04 3zm^TmwLrc, /t-iSai/rv/mv- 
Sff^ns, i ca-f 1 oi/^-^yr^iiic 

O^TlHBJa,? &fc, cCTfe. 03£ffl^Tl&B£L 
it I C A— F 1 tc=k9, JttS#£ffSft**£fco^T 
KWr*««, B4%m'TRWLfcIC*-HltCit) 

[0 2 2 4] X-r>y7S3 5 KCfcVT, 017, & L 
<1401 9£ffl^TlHBflbfc, I C A-F 1 O-t-VfX 
SfiSiJffia^fSti, Xr-y7S 3 5 2tcfc^T, 02 
1, 02 3, tb<«02 8«rfflV>TlUWbrc I CA- 

f i flDKKWMffiijjaa/c^fTsn*. 

[0 2 2 5] Xr-y7S 3 5 3tC*5t/>T, »g|53 1 
f4, 3MSI52 1 ^/l-LT, 04 3<DXr-y7S 3 3 3tC 

fibre, qrefcstifeffE* i Dfcgfiu ng^Masp 

3 3©«ffiili!iag|3 4 2fcfW»LT, SfflLftx-^ 

3 5 4K43^T, »SP3 1 tt, 8H§Lfcr-**£ 
tC, ^t'J 3 2«DS RT 4 Sfccka'S R A 4 6© I D_ 

S„ X7-y7S 3 5 4tCfc^T, tSli® I D^#&L4 
V^WBhSftfclft^ 5aa(4, Xx>y7S 3 6 0(Cit 

[0 2 2 6] Xx-y7S 3 5 4tCt3V>T, igSE^ 1 DA 5 
#ft-T«i:WRSnfcii^, ej«9S3 Hi, X7-y7S 
3 5 5£fcl^T, a€SP2 l^LT, ^-^3>77 
7fflU-^-r^2-l 41C, ACKffl|^%a6fiU X 
7>y7S 3 5 6lC*Jt,^T, 04 3©Xf7 7S 3 3 6fC 

mm&2 itfftLx&mi,, Bg^jaaa53 3©«a 

■t -y 5/ 3 y^Kses^ffl^rffi^^-a-So 
[0 2 2 7] Xx-y7S 3 5 7fCfe^T, SIffllgP3 1 

frSfr) Xf77S 3 5 7K33^T, ^- 
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f7yS 36 0{cJtty o 

[0 2 2 8] Xx-yT'S 3 5 7 lefcVT, /^-^3>1f 

SP3 3<D^a^80|5 4 2^0JSlbT, I8IiEStKake«\ 
^•y:X3y«Kses£ffl^T«*S£-t2\ 3 2€>S R 

A 4 6fCfcttS, KliE»KaketfK«2n3Sii^C#tii 
Xr-y7S 3 5 9£:fc^T, ^—>*3>77 7'ffl l J 
-27^*2-1 4(C, fflfig|52 l^fMTACKif 

£gftu aaatf^sna, 10 

[0 2 2 9] Xf77'S 3 5 4 (C*3V>Tx KISS! I Dtf 

&i£L%^t'mm-$tircm-&, fccttfxx-y/s 357 

3\ XT>y-fS 3 6 OlCfc^T, $WS$3 1 H\ 
3>7yrffl'J-^7>r^ 2-1 4K, a{fg|3 2 l£/f 
l/CNACK«#£53H3U »l««»7«tl*. 
[0 2 3 0] I C*-K1 fc-)KU-^7l'^2 

-1 2£33V>T > extSf SffiffllOSS*^ 

4 5 ic , wis* 5^-5-y>3 yft mmmz tir^z 20 

03 7*3&X}m3 8 5rffll/>TKiWLfc-9--eXx 
-^TOWtta^ 04 lfc*tfH4 2*ffl^T3MBLfc 

* ftT i/ ^j-x^o-y— e x ic mt % a^- 3 > 7 
•yyaa^T-rsct^RTflgT'Ss. 045^70- 

ft-h4#MLT, I D_StW<W-tfX I DtC# 

(S-rs-9— exo*tT*{cfft)ns> -Ky-^5-f* 

2-1 20S|/^-> ? 3>7-y7 5 5!ia(coi,>TtKW-r5o 
[0 2 3 1] Xf77S 3 7 1 fcitfXf-'yys 372 
£4oV>T\ 04 4(DXr77S 3 3 1 fc<£tfXT-y 30 

33 2fcraa©$uia^ifTsn3o ^lt, -ku-^ 

7l'£2- 1 2 0MPSP1 0 1 t±, XT7 7S 3 7 3fc 
fcl/^T, I D_SKtt£T51t-£X<D^SE&©^-;i? 
Hyf-yynvyK^ adg|39 1*^-1/ T I C*-F 
lfC&ftU Xf77S 3 7 4£fc^T, ffiaEf*H4 
6<DXx'y7°S 3 9 7 & L<&04 7©Xf'y7S 4 0 
5(C*5t,>T, I C*-Kl*«jSM-r«r-**S#U 
Xf77S 3 7 5K*5V>t\ I C#-F lfr^gMLfc 

[0232] XT77S 3 7 5fC*5l/->T, §{f Lfcfl*f 40 

3 8 2(C}tt? 0 Xf77S 3 7 5fCfc^T. SftL 
f:I§tf A C Kf t«li$nf;i^ Xf7 7 

5 3 7 6/ilXf77S 3 8 2lCt3V>T, 04 3WXf 
■y7S 3 3 3 7131X7^ 7 S 3 3 9 £mm<Dti!Mtfi%Z 

[0 2 3 3] 04 6 43<ktfH4 7©7o-ft- 

h£#S$LT, 0 4 5%fflV^TSiWLfc. /<-S?a>7 
•y 'J -#54 2 2-14 3 V7 -y :/«ig 

fctffTLT^frSft*, I C ft— F 1 Oi^— >*3 V7 50 
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v^TSWflUfe lC*-Kll:j;t), ffla#£*T2Fft5* 
fMCOV^TKBM"*^ H4*fl!^T8ffll!LfcI CA- 

[0 2 3 4] Xf'y7S 3 9 1 fciD'Xf -y 7°S 3 9 2 
tfet/^Ts 0 4 4©Xf7/S 3 5 1 *5<fct>*Xx-y7S 

3 5 2fcra«<DSaa#*fT£ftSo Xf7/S3 
9 1 tHi, If-ex I D_S tfig&iK it-lfX I D_ 
TOgHtffTfottS Xf»;7S 3 9 3ti3 
l/->T, 8PJWSB3 Hi, 0 4 5CXT77S 3 7 3lCi3t^ 
t, ^->'3y777ffl'J-^^2-l 4#i£fIL 
fc, I D_S (D^liiii©/ ^ — 3 y7 *y 7nvy F-SrS 

[0 2 3 5] Xr-y 7"S 3 9 4 *5<kt>*Xx-y 3 9 5 
(Cfel,^ 03 8<DXf7 7S 2 6 4fc<£t>*Xf--y7 B S 
2 6 5fcra«0*&Stf*S*U Xf77S 3 9 4K43^ 

fflaa. xf77s4o 5tcjttf 0 

[0 2 3 6] XT77S 3 9 6lC*3l/^T, fflffl$3 1 
I D_TgJfiEB#tC, I D_S <DMMM<Dt^—5?3 >7 

vfttm^-stiT^zfrm^mmTz c-r s 

RT45CI D_StcWtS - r*/^-5 > y->3>1f^7-C 
-;l/FtC> I D_T|g|IB#(Dv u pOfFRTtftHSteftT 
lr^**»S*»*WKf *) o Xf--y?S 3 9 6(CfeV^T, 
KSE«<D/*-5?a >7-y y^nJ^nTV^V^tfijff^ 
n/cJf^s ffiativ XT->y7°S 4 0 5iCjit?o 
[0 2 3 7] XT77S 3 9 6lC*5t/^T> mHtM<0/^~ 

■y7"S 3 9 7tCfcV>T> Si)W3 1 It, iHig|52 1 ^ri> 
LTs A-^ayT^-fmV— #54^2-1 4fC, A 

C Kfi^*as©-rs. 

[0 2 3 8] ^UT, Xf77S 3 9 87^SX-r'y7°S 

4 0 5fC*il/>Ts 04 4<0Xr-y7 , S 3 5 371j35Xx-y 

3 6 o tp«coMa^*fT^n. jaaff*i7sn 

[0 2 3 9] ^tC, 04 87^505 1 <D7P-ft-h 
*#BKLT, 01 3%ffl^Tt&H£Lfc ; e->"a-/bHji{i 

{cov^T^-rso ^^a-^raaidti, 0 4^:fflv^T 

KiWbfc I C i3— Kl t> *5?a-;I/IHjlfifflU-^ 
-<*2-l StCt^TUff^nSo CCTtt, 04%ffl 
WRiLft I C*-F 1 Offifta5 5 1 fe.kD'ttiiSi-y- 
-exjaagi55 2%. 01 3*ffl^THttWU/£«iffiit 
i/*a-;H 2 2fcU H4*ffl^TSiWbfc3aiffl53 
fe«ttf^H«*-tX«iaaP5 4*, 013?:fflV>TBi 
«LftftHtfa-^l 2 1 fcLTB^-fSo 
[0 2 4 0] $1*, 04 8O7n-^-h^#iU 

t> «a«t^a-/n 2 2*\ t^a-zuHaeffly 

-^7-Y^2-l 3t«Wr^-tr-yi/3 4>g§» 
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2-1 3t#GtS*'yi'a>mttfm%ZmGKt3if 

[0241] xf7^s 4 i i fcfci^T, ^a-/mg 

MEmV-ify^ifZ-l 3tt. 01 6, fcU<ttHl 

afcUffU Xr7^S4 1 2»Ct5^Tx I CA-Kl 
«D»Bfl»-t^a-;I/ 1 2 Hi, 017, 1 b < (±0 1 9 
«rffl^TiftWtrc, I C i3— F 1 ©■*- b'XitgiJffla^r 
*ffU ; eS/*a-;l/HU-^7-r^2-l 3t, ftHMI 
^a-;I/ 1 2 1 ©H§t\ -tr -y 3 >^Kses 1 10 

So 

[0242] XT7 7°S 4 1 3(C:f3^T, tv'a— fl/H 

1 3«, hi 6, tu<ttHi 

8 fcffl^TSWB bfc, V—PyJ & 2 ©-9— If XHSJifl 
afcUffU Xr-y^S 4 1 4lc}3</>T, ICA-Fl 
Ottii^^a-;!/ 1 2 2 tt, 017, t b < Ci0 1 9 

zm^rmmtrc, i c a- k i ©-9— exwwflia* 

*->"a-;H 2 2©RBT\ •b > y->3>^Kses2^# , r 
-5„ 20 
[0 2 4 3] X-r-y^S 4 1 5K*5^T, *^a-;l/H 
jlffffl'J-^f 2 2- 1 3 ©frJSf 95 1 0 Hi, Xr-y 
4 1 1 fc<):d ; Xf7 7'S 4 1 3£fct^TSlfT£*lfc 

2o-9--trxs5simafcfc^T?#?»n/-c i 

C A- F 1 ©#— K I D£gfC, 'Afflm^Va.-A' 1 2 
It, HIl ; e^-;H 2 2©2O0*-FI Dtf- 
SLfcfrgjt^fcfflR-i-So Xr7 7"S 4 1 5fC*5^T, 
*- K I D#-SL4^i: ! PJW*nfc*£, Xf'^S 
4 1 6{c:fc^T, 01 6©Xr-y:/S 1 6£|sHi©$!ia 

jy*fT«n*o 30 

[0 2 4 4] X-r-y/S 4 1 5K*5^T, 

1 Djy-SSrrstWWStlfc*^, Xx-y^S 4 1 7£ 
*5<,>T, *2>a-;l/Hfflfflffly-£7'r*2-l 3©$lJ 
ttffil 0 Hi, *5?a-/l/r-*8H63v>K*^M» 
^>*a-;H 2 i fcsHrtSo 

[0 2 4 5] ^PS^a-/!/ 1 2 1 ©»g|56 1 fcfc, 
X-r-y^S 4 1 8tcfc^T, ^a-^x-^fjBflte 
3 7> K^^i-WIIIffl'J-^^-f^ 2- 1 3fr 

eseu n§^saagfS3 3©, «aasaagi5 4 2«mii 

bT, ^t!)-ri.'r-^?r-tr-y->3y«KseslT'Bg^{k^ 40 
tf, Xr-y^S 4 1 9T\ Bg^fkx-^^rt^a-;^ 

[0 2 4 6] ^v f a-;l/P^afflfflU-^*5'f'^2 - 1 3 
©»$ 1 0 Hi, Xf'y/S 4 2 OtCfcl^T, Bg^© 

aapi 02(0, ^jiasaagpi 1 zzmm^x. gftb 

/cr-^^-b-yv-syaKsesl T*«^U, Xx-y7 p S4 

2 lfCfcl^T, x-^fc-fe-yS's VigKses 2 T'Bg^ftS 

-;H 2 2<D^jgigP6 Hi, Xf7^S 4 2 2fC*Jl> 

T, B|^j!Q,aa56 3©, ftie8&9£M 2£©JS3)bT, 50 
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SfiLftf-if*tyi'3 yfSKses 2 T-'<t Xr 
•y7"S 4 2 3K*5V>T, S^Lfcf-^^tU 62© 

[0 2 4 7] 0 4 9©7n-^-h%#!$L 

T, «ffl^->"a-;H 2 2#, *S>»-/HBiHWIU 
-2^2 2-1 3ttt^1-5-tr-y^3>Sli:, 
*^a-;H 2 ltf, t^a-;HHIiififfly-^7-r* 
2-1 3ttt^f*-ty5'ay»i:^W-lf»*«^C 

[0248]X-r-yyS431 fcfcVT, *^a-;HI8 
jifflfflU-^5-1'^2- 1 3W\ 0 1 6, &b<«01 
8*ffl^TWWUfc, 'J-*?* * 2 ©-9— If X»giM 
a^Uffb, Xf'^S 4 3 2K*3I/->T, IC#-Fl 
O^radt^a-^ 1 2 Hi, 017, & b < «0 1 9 

*fflv>TSJW bfc, 1 C A- F i ©-9-- if xmsmbs* 

HffU tSJa-JHB'J -*7f*2-l 3t, ftffltt 
^i/a-;I/ 1 2 1 ©Ht?, -t-y->3 >®Kses 1 

[0 2 4 9] Xr-y^S 4 3 3fCfcl/^T, t5>a— rt/H 
W^mV—PyJZZ- 1 3 (i, 016, tb<«01 

S**frU Xf7^S 4 3 4tCfcl^T, IC*-K1 
O^ii^ya-^ 1 2 2 0 1 7 , t> b < fi0 1 9 

*ffl^T»WLft, i ci3- f i ©-y-ex^sijjaa?: 

£ffU t^a-/WJ-^?2-l 3fc, ftjia 
^rv'a-;!/ 1 2 2 ©BBT\ -fey 5/3 >8Kses 1 

[0 2 5 0] X-r-y^S 4 3 571gX-r-y 7°S 4 3 9tC 
*5V>T, 04 8<0Xf77'S 4 1 57bSX-r-y/S 4 1 
9 fc|f3&©JtaaJbWTStt5o ^bT, XT7/S4 4 

octe^T, ; e> ; a-;i/Sa{8ffly-^'f'^2- 1 3 
OMttSl 0 Hi, Sllbfcr-^^r, ttiiat^a- 
;H 2 2lCjMfifSo 04 8©Xf77S 4 2 0*3£lf 
Xf7^S 4 2 1 Kis^Tti, gfib/cx-^^r-b-y^ 
3 >^Kses 1 HOm b, I§L/cf- * fc-fe >y > 3 
Kses2T*Bg^{tbrd^Cjtagtv J a-;H 2 2fCjMfi 
bfc^, CCf(t «ffl»*5?a-;H 2 2fc, -fe-y> 

sy^Ksesi^-WbTi/^/c*, cne.©ffl.a*^s* 

[0 2 5 1 ] ttliti/a-;l/ 1 2 2©M2fgP6 1 (i, 
Xf7^S 4 1 1 Kfc^T, Bg^«ia^6 3£iW8Pb 
T, §fflbfcx-^^r-b-y->3>»Ksesl T'«^b, X 
x-y/S 4 2 2(Cfct^T, S^brcr-^^^t'J 6 2 

[0 2 5 2] ^tC, 0 5O©7D-^-v-h^:#HgU 
T, &aM*tS?a-;H 2 2*^ ti/a-;l/P^jififfl'J 
-^5^^2-1 3t«Wf5-b-y->3y^i:, l^Mtt 
^->'a-;H 2 1*V ^->*a-;l/P^a^ffl'J-^W^ 
2- 1 3fcttft-r^-b-y>'3>'afcA^i.^, ^r^*a 
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;H 2 2m5t-r>a^, £Httes?a-/M 

2 1 ST 5 1 3 -tfO-fe -y ~> a U £119 

[0 2 5 3] Xr-y^S 4 5 1 TISXf- >y 7S 4 5 6(C 
fcl^T, 04 805Xf-'y7'S 4 1 1 MXf7 7S 4 1 

i;_^^^ 2 - 1 3 fc, &PMI«S73-;]/ 1 2 1 ©H 
T\ -b-yi/aV^Ksesl^W^n, €r^a-;l/|g|U- 
**7-f'2 2 - 1 3 ftlit-^j-yl/ 1 2 2 10 

■b -y f a y«Kses 2 tf*WfS ns„ 

[0 2 5 4] XT77'S 4 5 7 KfcVT, t^a-^K 
fflffffl "J * 2 - 1 3 <D»gl$ 1 0 Hi. Bg^JQ 

aSPl 0 2£fi8PLT, -tr-yi>3y«Kses2S\ tz-yi/ 

3 VSKses 1 TWf^<k*-fr, 4MM*eS>a-* 1 2 UC 
JMfflfSo ftW«*S'a-;H 2 l(03iiJffllgP6 Hi, Bg 
#«HM53 3©«il»«il!«5 4 2%W»LT, SULfc 
7*-**-t'y>3 ^StKses 1 bK& *). 
■by ~s 3 VgtKses 2 0 ttjf <, 

[0 2 5 5] Xr-y7S4 5 9{C*5V>T\ 04 8©7t 20 
•y7S 4 1 7 fcH«0S&g#£frSft*. Xf-y^S 4 
6 OKfcVvt, fcHMfre^a— A> 1 2 1 <DMfflgP6 1 
& SWT 5f- * *-b -y i/ 3 V^Kses 2 TBg^ffc U 

mreftr- * z*:is3.-)immmm y - 2*5 ^ 2 2 - 1 

3 jMffifT&o 

[0 2 5 6] Xt7 7'S 4 6 1 (CfcV^T, 04 9<DXx 
•y7S 4 4 0fcHtt©ffla#£ffSft3. ■€" LT\ Xf 
•y7S 4 6 2*5<fctfXr-y7S 4 6 3tCfc(,>T, 04 8 

(DXr-y^s 4 2 2*5*1? s 4 2 3 i: mmommtfimfi 

fW. 30 
[0 2 5 7] t fcte%, 04 8<D7,7-v7S 4 2 Ofe<t 
tfXr-yys 4 2 1 Kts^Tfi, giLfcf-??:t7 
i/3 >mses 1 fH^U HtUf-ii*-b7i/ay 
«Kses2 TfBg^kUfeatftiBBt^a-^ 1 2 2 Kg 

ttte, «ffl«t^a-;n 2 2£, an*&s>a-;H 
2 1 li-<D-fe'y>3^Kses2«:#5<li:A<Tt 

[0 2 5 8] f lt> 05 l©7P-f-+-h*#SgL 
T, ^M^t^a-;!/ 1 2 1 ilttilSt^a-/!/ 1 2 2 40 
ftV «iiSHfi«K_coiiion*ttWL, *tl*ffll^TfiS 
|g|E^fl/\ SfC «5iO!)-t'y->a>«Kses*«Wr5 
t^a-Zl/HjUftCOVTUiWrSo 

[0 2 5 9] Xr-yT'S 4 7 1 fcitfXr-y 7S 4 7 2 

k:*5i>T. £KJ8l ; ev'a-/H 2 1 t#jiSi^a-;i/ 
1 2 2«, «a^aK_conmonfc«fc»J, *S5!2aE£tT 
t\ •te-yi'aVSKses&JWrf-So Xf7/S 4 7 3fC 
fcl^T, ; t^a-«Ilffly-if74'^2-l 3«„ 
Xr-yT'S 4 7 1 fc<fctfXx-y7S 4 7 2(C*5tt3fflS 
!2iE©aflK(D*.««-r5 (T^cte^ &IMJ«**a- 50 
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[0 2 6 0] Xx>y7S 4 7 4tC*5<,>T, 04 8<DXf 
>y7"S 4 1 7 fcHttOJttSfl^fTSftS. Xr-yT'S 4 
7 5»C*3^T> &|JMH:$>a-;H 2 lCD»gP6 1 
tt, HS^ffll!ffl5 3 3©«a««ia«5 4 2*HPj»LT, & 

7*-***^a-MBaMtfflU-y5-f ^ 2- 1 3K& 
fif 5. *tT, Xry7*S 4 7 6 7}3?Xr-yTS 4 7 
8(CteV^Tv 04 9©Xf7^S 4 2 ITiMXr-yTS 
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[0 2 6 3] C<DtmUfc&. 09tC^-r<};3tC, 3> 
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tcBHflJ^n^, 7a^A*M^nT^5KMri'X 
^115 (7D«ytf- (SSiSflO r-rx^^ty) , 
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<Ut¥«ft:y«U 1 1 84i!J:»)4S^-y^-^r^ 
7^if{c,};0<«fi)c?n^c 
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[0ii] -ns'j-^-r^o^t'jtf^Hiwrsft 
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[01 6] v-^-f^KD^-^xmsmmK-D^rm 
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[023] i c *- KoKaEaMBijftato^^TSiiwr 
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[05 1] €r->*a-;UHjiMfflatCO^T^Wr-5/c:4& 

[ft^<QlBfE] 

i ic#-ki y-^-r*, 21 

3 1 fflfflffi, 3 2**U, 3 3 

4 1 &fflat&9!& 4 2 fta^jaagp, 4 3 

^■©ffiOBg^SaagP, 45 SRT, 46 SR 

a, si a<ggp, 52 exjaiagp, * 
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* 5 3 ilffgfl, 5 4 £Mft— trxMB, 6 
1 MfflgP, 6 2 ^€'J> 6 3 B£re&9& 9 

1 i o i fM»fc i o 2 Bg^sag 

103 **y, 1 1 1 fimttunk ii 

2 «sgi&a^ i i 3 t<Dim^mm^ 

1 0 5 S^gP, 1 0 6 A7j3i$, 12 1 4^8 
t^a-yk 1 2 2 £3I8&E^a-/l/ 
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(B) 



| Bmo. | RgglD | Verelon | gg^iT 



Kaka | Cert If Icetej 



1 | 0005 


3 


#,0ESS€bit| 0100.. .01 | Nona 


2 | 0018 


2 


*> % ECC1tthit| 0110...11 |sEWBf-9 



ffiJSEttlD 



Level 



Version 



BUM 



1 | 0005 




3 


#.DES5ait| 01 00... 01 


None | 


2 1 0018 


5 


2 


ft.AES128bit| 0110.. .11 
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3 


0434 


3 


1 


&.RSA512bit O011...10 




4 


0124 


6 


6 


tt.KA2Mfflit| 1011. ..01 




5 


0S55 


2 


4 


^.AES2sait| 1001 ...oo 
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1 


tt*ECC160blt| 1110.. .11 




7 | 0342 


7 


1 |tt,ECC224bit| 0101. ..10 
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A, B r C, D, E 
F, G, H, I.J|C»Jt 











A 
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C(rw, vup).D(ro) 


C 
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E (rw, vup) 


E 


A(ro),B<ro).C(ro) 


F 


G(ro, vup) t H(r«, vup) 


G 


H(rw r vup) 


H 




I 


B(rw) 


J 





RW:Read and Write allowed 
R0:Read Only 

VUP:Key Version Up allowed 
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ica- 
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z 
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(A) 
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IC*-K(3?«gr(ID) 
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s 
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i 



ica- kou— exnuHftn " |S241 

I 



* 1 1 ICft- K<PaiBE««Wteg 



E 



S242 



HkVJ— *9-f**fc* ID_Ste« 



S243 



S244 



S245 



[02 6] 
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f-SHA-1(ll>«Wr* 

I 



1113 
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T 



"IS114 
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I 
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1S116 



< o=Xp mod rte&UtEofrT^ S^ 
JYe; 
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[Yes - 



No/ 



-\513 
-/Ho 
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JS134 
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END 



S120 



END 



(32) 



ftffl 2001-35736 



[02 8] 



[02 9] 



c 



S141 



I 
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S148 
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/Ho 
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S191 
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S223 



< 



\ &tE3;Kfcfr ? / Ro~ 
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I 
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y - * 5 -r * oraEttmura 
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S2S7 




No 


-t: y a ^@Kses-e«<§ Ufc 
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14 0] 



[03 8] 



V . &fe&gSTART J 



f | ica-h^p-fr-gxaagwii || S26 1 
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I 
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i 
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14 3] 
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i ~ 
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ID_TSSEB#I=, -r-*<D 
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I 
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1 1 <)-#^4 zoiBzmmmtom 



S332 
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S337 
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Yes 
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